CVE-2015-1793

The CVE-2015-1793 entry concerns OpenSSL’s X509_verify_cert in crypto/x509/x509_vfy.c, affecting OpenSSL 1.0.1n/o and 1.0.2b/c, where Basic Constraints cA values are mishandled when identifying alternative certificate chains. This could allow a remote attacker to spoof a Certification Authority r...