CVE-2015-1789: The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1...

Security readout for executives and security teams

CVE-2015-1789 is an OpenSSL denial-of-service issue. A remote attacker could crash affected applications by sending malformed certificate time data in certain certificate-validation paths. The sources do not show code execution, data theft, or confirmed active exploitation. Exposure is most likely in legacy systems still running the listed vulnerable OpenSSL branches, especially TLS services using client certificate authentication or custom certificate verification callbacks. Products bundling OpenSSL may also be affected according to vendor advisories. Prioritize as a moderate availability issue for legacy OpenSSL deployments. It is not described as remote code execution, but internet-facing authentication services could be crashed. Fix through standard patch management, with urgency based on exposed TLS services. Mitigation focus: Upgrade OpenSSL to 0.9.8zg, 1.0.0s, 1.0.1n, 1.0.2b, or later supported releases.; Apply operating-system or appliance vendor updates that include the OpenSSL fix.; Identify products that bundle OpenSSL and check vendor advisories for fixed builds..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.