UpHeron
All vulnerabilities

Servers and applications

CVE-2015-1789

The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication with a custom verification…

Severity
High 7.5
Published
12 Jun 2015
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • Version 1.0.2a
  • Version 1.0.2
  • Version 1.0.2-beta1
  • Version 1.0.1m
All 45 release lines
  • Every version up to 0.9.8zf
  • Version 1.0.0-beta1
  • Version 1.0.0-beta2
  • Version 1.0.0-beta3
  • Version 1.0.0-beta4
  • Version 1.0.0-beta5
  • Version 1.0.0
  • Version 1.0.0a
  • Version 1.0.0b
  • Version 1.0.0c
  • Version 1.0.0d
  • Version 1.0.0e
  • Version 1.0.0f
  • Version 1.0.0g
  • Version 1.0.0h
  • Version 1.0.0i
  • Version 1.0.0j
  • Version 1.0.0k
  • Version 1.0.0l
  • Version 1.0.0m
  • Version 1.0.0n
  • Version 1.0.0o
  • Version 1.0.0p
  • Version 1.0.0q
  • Version 1.0.0r
  • Version 1.0.1-beta1
  • Version 1.0.1-beta2
  • Version 1.0.1-beta3
  • Version 1.0.1
  • Version 1.0.1a
  • Version 1.0.1b
  • Version 1.0.1c
  • Version 1.0.1d
  • Version 1.0.1e
  • Version 1.0.1f
  • Version 1.0.1g
  • Version 1.0.1h
  • Version 1.0.1i
  • Version 1.0.1j
  • Version 1.0.1k
  • Version 1.0.1l
  • Version 1.0.1m
  • Version 1.0.2-beta1
  • Version 1.0.2
  • Version 1.0.2a

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2015-1789
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2015-1789