CVE-2015-1792

OpenSSL < 0.9.8zg, 1.0.0 < 1.0.0s, 1.0.1 < 1.0.1n, 1.0.2 < 1.0.2b - Denial of Service via NULL BIO Data Structure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-1792. PoCs published by Trinadh465.

AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2015-1792, targeting OpenSSL 1.0.1g. The exploit appears to focus on MacOS-specific implementations, including socket and string utilities, likely demonstrating the vulnerability in a controlled environment.

Description

The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.

Exploits (1)

nomisec WORKING POC
by Trinadh465 · poc
https://github.com/Trinadh465/OpenSSL-1_0_1g_CVE-2015-1792

This repository contains a proof-of-concept exploit for CVE-2015-1792, targeting OpenSSL 1.0.1g. The exploit appears to focus on MacOS-specific implementations, including socket and string utilities, likely demonstrating the vulnerability in a controlled environment.

Classification
Working Poc 80%
Attack Type
Other
Complexity
Moderate
Reliability
Theoretical
Target: OpenSSL 1.0.1g
No auth needed
Prerequisites: OpenSSL 1.0.1g installation · MacOS environment
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (48)

Core 48
Core References
Mailing List, Third Party Advisory vendor-advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html
Vendor Advisory vendor-advisory
http://www.ubuntu.com/usn/USN-2639-1
Third Party Advisory, VDB Entry vdb-entry
http://www.securityfocus.com/bid/75154
Third Party Advisory vendor-advisory
https://security.gentoo.org/glsa/201506-02
Third Party Advisory, VDB Entry vdb-entry
http://www.securityfocus.com/bid/91787
Mailing List, Third Party Advisory vendor-advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html
Third Party Advisory vendor-advisory
http://www.debian.org/security/2015/dsa-3287
Vendor Advisory vendor-advisory
http://rhn.redhat.com/errata/RHSA-2015-1115.html
Third Party Advisory, VDB Entry vdb-entry
http://www.securitytracker.com/id/1032564

Scores

EPSS 0.2248
EPSS Percentile 97.4%

Details

CWE
CWE-399
Status published
Products (36)
openssl/openssl 1.0.0 (6 CPE variants)
openssl/openssl 1.0.0a
openssl/openssl 1.0.0b
openssl/openssl 1.0.0c
openssl/openssl 1.0.0d
openssl/openssl 1.0.0e
openssl/openssl 1.0.0f
openssl/openssl 1.0.0g
openssl/openssl 1.0.0h
openssl/openssl 1.0.0i
... and 26 more
Published Jun 12, 2015
Tracked Since Feb 18, 2026