CVE-2015-1790

OpenSSL < 0.9.8zg, 1.0.0 < 1.0.0s, 1.0.1 < 1.0.1n, 1.0.2 < 1.0.2b DoS via PKCS7_dataDecode

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-1790. PoCs published by Trinadh465.

AI-analyzed exploit summary The repository contains partial or incomplete code snippets related to OpenSSL 1.0.1g and CVE-2015-1790, but lacks a functional exploit or clear proof-of-concept. The files appear to be configuration and utility code rather than exploit code.

Description

The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data.

Exploits (1)

nomisec STUB
by Trinadh465 · poc
https://github.com/Trinadh465/OpenSSL-1_0_1g_CVE-2015-1790

The repository contains partial or incomplete code snippets related to OpenSSL 1.0.1g and CVE-2015-1790, but lacks a functional exploit or clear proof-of-concept. The files appear to be configuration and utility code rather than exploit code.

Classification
Stub 90%
Attack Type
Other
Complexity
Complex
Reliability
Theoretical
Target: OpenSSL 1.0.1g
No auth needed
Prerequisites: None identified
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (53)

Core 53
Core References
Third Party Advisory vendor-advisory
http://www.debian.org/security/2015/dsa-3287
Vendor Advisory vendor-advisory
http://rhn.redhat.com/errata/RHSA-2015-1115.html
Vendor Advisory vendor-advisory
http://rhn.redhat.com/errata/RHSA-2015-1197.html
Third Party Advisory, VDB Entry vdb-entry
http://www.securitytracker.com/id/1032564
Mailing List, Third Party Advisory vendor-advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html
Vendor Advisory vendor-advisory
http://www.ubuntu.com/usn/USN-2639-1
Third Party Advisory vendor-advisory
https://security.gentoo.org/glsa/201506-02
Third Party Advisory, VDB Entry vdb-entry
http://www.securityfocus.com/bid/91787
Mailing List, Third Party Advisory vendor-advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html
Third Party Advisory, VDB Entry vdb-entry
http://www.securityfocus.com/bid/75157

Scores

EPSS 0.2290
EPSS Percentile 97.5%

Details

Status published
Products (36)
openssl/openssl 1.0.0 (6 CPE variants)
openssl/openssl 1.0.0a
openssl/openssl 1.0.0b
openssl/openssl 1.0.0c
openssl/openssl 1.0.0d
openssl/openssl 1.0.0e
openssl/openssl 1.0.0f
openssl/openssl 1.0.0g
openssl/openssl 1.0.0h
openssl/openssl 1.0.0i
... and 26 more
Published Jun 12, 2015
Tracked Since Feb 18, 2026