Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before decompression without checking against the configured certificate size limit. Impact summary: An attacker can cause per-connection memory allocations of up to approximately 22 MiB and extra CPU work, potentially leading to service degradation or resource exhaustion (Denial of Service). In affected configurations, the peer-supplied uncompressed certificate length from a CompressedCertificate message is used to grow a heap buffer prior to decompression. This length is not bounded by the max_cert_list setting, which otherwise constrains certificate message sizes. An attacker can exploit this to cause large per-connection allocations followed by handshake failure. No memory corruption or information disclosure occurs. This issue only affects builds where TLS 1.3 certificate compression is compiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression algorithm (brotli, zlib, or zstd) is available, and where the compression extension is negotiated. Both clients receiving a server CompressedCertificate and servers in mutual TLS scenarios receiving a client CompressedCertificate are affected. Servers that do not request client certificates are not vulnerable to client-initiated attacks. Users can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION to disable receiving compressed certificates. The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as the TLS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20223-1 advisory.

    Security fixes:

     - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256829).
     - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830).
     - CVE-2025-15468: NULL dereference in SSL_CIPHER_find() function on unknown cipher ID (bsc#1256831).
     - CVE-2025-15469: openssl dgst one-shot codepath silently truncates inputs >16MB (bsc#1256832).
     - CVE-2025-66199: TLS 1.3 CompressedCertificate excessive memory allocation (bsc#1256833).
     - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834).
     - CVE-2025-69418: Unauthenticated/unencrypted trailing bytes with low-level OCB function calls     (bsc#1256835).
     - CVE-2025-69419: Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion (bsc#1256836).
     - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837).
     - CVE-2025-69421: NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function (bsc#1256838).
     - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839).
     - CVE-2026-22796: ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function (bsc#1256840).

    Other fixes:

    - Enable livepatching support for ppc64le (bsc#1257274).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20152-1 advisory.

    Security fixes:

     - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256829).
     - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830).
     - CVE-2025-15468: NULL dereference in SSL_CIPHER_find() function on unknown cipher ID (bsc#1256831).
     - CVE-2025-15469: openssl dgst one-shot codepath silently truncates inputs >16MB (bsc#1256832).
     - CVE-2025-66199: TLS 1.3 CompressedCertificate excessive memory allocation (bsc#1256833).
     - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834).
     - CVE-2025-69418: Unauthenticated/unencrypted trailing bytes with low-level OCB function calls     (bsc#1256835).
     - CVE-2025-69419: Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion (bsc#1256836).
     - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837).
     - CVE-2025-69421: NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function (bsc#1256838).
     - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839).
     - CVE-2026-22796: ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function (bsc#1256840).

    Other fixes:

    - Enable livepatching support for ppc64le (bsc#1257274).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:1473 advisory.

    * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file     (CVE-2025-11187)
      * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in     CMS parsing (CVE-2025-15467)
      * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling     (CVE-2025-15468)
      * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation     (CVE-2025-15469)
      * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate     compression (CVE-2025-66199)
      * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160)
      * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB     encryption/decryption calls (CVE-2025-69418)
      * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing     (CVE-2025-69419)
      * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421)
      * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420)
      * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795)
      * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification     (CVE-2026-22796)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5f7d0a5656 advisory.

    Resolves: CVE-2025-15467     Resolves: CVE-2025-15468     Resolves: CVE-2025-15469     Resolves: CVE-2025-66199     Resolves: CVE-2025-68160     Resolves: CVE-2025-69418     Resolves: CVE-2025-69420     Resolves: CVE-2025-69421     Resolves: CVE-2025-69419     Resolves: CVE-2026-22795     Resolves: CVE-2026-22796     Resolves: CVE-2025-11187

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50080 advisory.

    - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469       CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420       CVE-2025-69421 CVE-2026-22795 CVE-2026-22796       Resolves: RHEL-142068       Resolves: RHEL-142002       Resolves: RHEL-142055       Resolves: RHEL-142051       Resolves: RHEL-142047       Resolves: RHEL-142043       Resolves: RHEL-142039       Resolves: RHEL-142035       Resolves: RHEL-142031       Resolves: RHEL-142011       Resolves: RHEL-142027       Resolves: RHEL-142023

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50081 advisory.

    - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469       CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420       CVE-2025-69421 CVE-2026-22795 CVE-2026-22796       Resolves: RHEL-142062       Resolves: RHEL-141985       Resolves: RHEL-142053       Resolves: RHEL-142049       Resolves: RHEL-142045       Resolves: RHEL-142041       Resolves: RHEL-142037       Resolves: RHEL-142033       Resolves: RHEL-142029       Resolves: RHEL-142008       Resolves: RHEL-142025       Resolves: RHEL-142021
    - Fix CVE-2025-9230       Resolves: RHEL-115885

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:1473 advisory.

    * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file     (CVE-2025-11187)

    * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS     parsing (CVE-2025-15467)

    * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling     (CVE-2025-15468)

    * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation     (CVE-2025-15469)

    * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate     compression (CVE-2025-66199)

    * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160)

    * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB     encryption/decryption calls (CVE-2025-69418)

    * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing     (CVE-2025-69419)

    * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421)

    * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420)

    * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795)

    * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification (CVE-2026-22796)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:1472 advisory.

    * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file     (CVE-2025-11187)

    * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS     parsing (CVE-2025-15467)

    * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling     (CVE-2025-15468)

    * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation     (CVE-2025-15469)

    * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate     compression (CVE-2025-66199)

    * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160)

    * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB     encryption/decryption calls (CVE-2025-69418)

    * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing     (CVE-2025-69419)

    * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421)

    * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420)

    * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795)

    * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification (CVE-2026-22796)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7980-1 advisory.

    Stanislav Fort, Petr imeek, and Hamza discovered that OpenSSL incorrectly validated PBMAC1 parameters     when doing PKCS#12 MAC verification. An attacker could possibly use this issue to cause OpenSSL to crash,     resulting in a denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-11187)

    Stanislav Fort discovered that OpenSSL incorrectly parsed CMS AuthEnvelopedData messages. An attacker     could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service.
    (CVE-2025-15467)

    Stanislav Fort discovered that OpenSSL incorrectly handled memory in the SSL_CIPHER_find() function. An     attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This     issue only affected Ubuntu 25.10. (CVE-2025-15468)

    Stanislav Fort discovered that the OpenSSL openssl dgst command line tool incorrectly truncated data to     16MB. An attacker could posibly use this issue to hide unauthenticated data beyond the 16MB limit. This     issue only affected Ubuntu 25.10. (CVE-2025-15469)

    Tomas Dulka and Stanislav Fort discovered that OpenSSL incorrectly handled memory with TLS 1.3 connections     using certificate compression. An attacker could possibly use this issue to consume resources, leading to     a denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-66199)

    Petr Simecek and Stanislav Fort discovered that OpenSSL incorrectly handled memory when writing large data     into a BIO chain. An attacker could possibly use this issue to consume resources, leading to a denial of     service. (CVE-2025-68160)

    Stanislav Fort discovered that the OpenSSL OCB API could incorrectly leave final partial blocks     unencrypted and unauthenticated. An attacker could possibly use this issue to read or tamper with the     affected final bytes. (CVE-2025-69418)

    Stanislav Fort discovered that OpenSSL incorrectly handled the PKCS12_get_friendlyname() utf-8 conversion.
    An attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service.
    (CVE-2025-69419)

    Luigino Camastra discovered that OpenSSL incorrectly handled ASN1_TYPE validation in the     TS_RESP_verify_response() function. An attacker could possibly use this issue to cause OpenSSL to crash,     resulting in a denial of service. (CVE-2025-69420)

    Luigino Camastra discovered that OpenSSL incorrectly handled memory in the PKCS12_item_decrypt_d2i_ex     function. An attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of     service. (CVE-2025-69421)

    Luigino Camastra discovered that OpenSSL incorrectly handled ASN1_TYPE validation in PKCS#12 parsing. An     attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service.
    (CVE-2026-22795)

    Luigino Camastra discovered that OpenSSL incorrectly handled ASN1_TYPE validation in the     PKCS7_digest_from_attributes() function. An attacker could possibly use this issue to cause OpenSSL to     crash, resulting in a denial of service. (CVE-2026-22796)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the openssl package has been released.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-105:04 advisory.

    * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file     (CVE-2025-11187)
      * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in     CMS parsing (CVE-2025-15467)
      * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling     (CVE-2025-15468)
      * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation     (CVE-2025-15469)
      * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate     compression (CVE-2025-66199)
      * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160)
      * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB     encryption/decryption calls (CVE-2025-69418)
      * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing     (CVE-2025-69419)
      * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421)
      * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420)
      * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795)
      * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification     (CVE-2026-22796)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4b824428-fb93-11f0-b194-8447094a420f advisory.

    The OpenSSL project reports:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50075 advisory.

    - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469       CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420       CVE-2025-69421 CVE-2026-22795 CVE-2026-22796       Resolves: RHEL-142068       Resolves: RHEL-142002       Resolves: RHEL-142055       Resolves: RHEL-142051       Resolves: RHEL-142047       Resolves: RHEL-142043       Resolves: RHEL-142039       Resolves: RHEL-142035       Resolves: RHEL-142031       Resolves: RHEL-142011       Resolves: RHEL-142027       Resolves: RHEL-142023

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-1473 advisory.

    - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469       CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420       CVE-2025-69421 CVE-2026-22795 CVE-2026-22796       Resolves: RHEL-142068       Resolves: RHEL-142002       Resolves: RHEL-142055       Resolves: RHEL-142051       Resolves: RHEL-142047       Resolves: RHEL-142043       Resolves: RHEL-142039       Resolves: RHEL-142035       Resolves: RHEL-142031       Resolves: RHEL-142011       Resolves: RHEL-142027       Resolves: RHEL-142023

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-1472 advisory.

    - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469       CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420       CVE-2025-69421 CVE-2026-22795 CVE-2026-22796       Resolves: RHEL-142062       Resolves: RHEL-141985       Resolves: RHEL-142053       Resolves: RHEL-142049       Resolves: RHEL-142045       Resolves: RHEL-142041       Resolves: RHEL-142037       Resolves: RHEL-142033       Resolves: RHEL-142029       Resolves: RHEL-142008       Resolves: RHEL-142025       Resolves: RHEL-142021

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:1472 advisory.

    * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file     (CVE-2025-11187)
      * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in     CMS parsing (CVE-2025-15467)
      * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling     (CVE-2025-15468)
      * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation     (CVE-2025-15469)
      * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate     compression (CVE-2025-66199)
      * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160)
      * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB     encryption/decryption calls (CVE-2025-69418)
      * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing     (CVE-2025-69419)
      * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421)
      * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420)
      * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795)
      * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification     (CVE-2026-22796)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1472 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file     (CVE-2025-11187)

    * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS     parsing (CVE-2025-15467)

    * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling     (CVE-2025-15468)

    * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation     (CVE-2025-15469)

    * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate     compression (CVE-2025-66199)

    * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160)

    * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB     encryption/decryption calls (CVE-2025-69418)

    * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing     (CVE-2025-69419)

    * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421)

    * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420)

    * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795)

    * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification (CVE-2026-22796)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1473 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file     (CVE-2025-11187)

    * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS     parsing (CVE-2025-15467)

    * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling     (CVE-2025-15468)

    * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation     (CVE-2025-15469)

    * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate     compression (CVE-2025-66199)

    * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160)

    * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB     encryption/decryption calls (CVE-2025-69418)

    * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing     (CVE-2025-69419)

    * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421)

    * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420)

    * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795)

    * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification (CVE-2026-22796)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6113 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6113-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     January 27, 2026                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : openssl     CVE ID         : CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469                      CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419                      CVE-2025-69420 CVE-2025-69421 CVE-2026-22795 CVE-2026-22796

    Multiple vulnerabilities have been discovered in OpenSSL, a Secure     Sockets Layer toolkit, which may result in denial of service,     information leaks, or potentially remote code execution.

    Additional details can be found in the upstream advisory:
    https://openssl-library.org/news/secadv/20260127.txt

    For the oldstable distribution (bookworm), these problems have been fixed     in version 3.0.18-1~deb12u2.

    For the stable distribution (trixie), these problems have been fixed in     version 3.5.4-1~deb13u2.

    We recommend that you upgrade your openssl packages.

    For the detailed security status of openssl please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/openssl

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of OpenSSL installed on the remote host is prior to 3.3.6. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.3.6 advisory.

  - Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server     receives an unknown cipher suite from the peer, a NULL dereference occurs.  Impact summary: A NULL pointer     dereference leads to abnormal termination of the running process causing Denial of Service.  Some     applications call SSL_CIPHER_find() from the client_hello_cb callback on the cipher ID received from the     peer. If this is done with an SSL object implementing the QUIC protocol, NULL pointer dereference will     happen if the examined cipher ID is unknown or unsupported.  As it is not very common to call this     function in applications using the QUIC  protocol and the worst outcome is Denial of Service, the issue     was assessed as Low severity.  The vulnerable code was introduced in the 3.2 version with the addition of     the QUIC protocol support.  The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as     the QUIC implementation is outside the OpenSSL FIPS module boundary.  OpenSSL 3.6, 3.5, 3.4 and 3.3 are     vulnerable to this issue.  OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. Fixed in OpenSSL     3.3.6 (Affected since 3.3.0). (CVE-2025-15468)

  - Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data     where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL     pointer dereference when processing malformed PKCS#7 data.  Impact summary: An application performing     signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can     be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service.  The     function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its     type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the     ASN1_TYPE union, causing a crash.  Exploiting this vulnerability requires an attacker to provide a     malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of     Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons     the issue was assessed as Low severity.  The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by     this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary.  OpenSSL     3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Fixed in OpenSSL 3.3.6 (Affected     since 3.3.0). (CVE-2026-22796)

  - Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed     PKCS#12 file.  Impact summary: An application processing a malformed PKCS#12 file can be caused to     dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service.  A type confusion     vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first     validating the type, causing an invalid pointer read.  The location is constrained to a 1-byte address     space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This     range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably     result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or     application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12     files in applications as they are usually used to store private keys which are trusted by definition. For     these reasons, the issue was assessed as Low severity.  The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not     affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary.  OpenSSL     3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.  OpenSSL 1.0.2 is not affected by this     issue. Fixed in OpenSSL 3.3.6 (Affected since 3.3.0). (CVE-2026-22795)

  - Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the     PKCS12_item_decrypt_d2i_ex() function.  Impact summary: A NULL pointer dereference can trigger a crash     which leads to Denial of Service for an application processing PKCS#12 files.  The     PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before     dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter     can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to     achieve code execution or memory disclosure.  Exploiting this issue requires an attacker to provide a     malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low     severity according to our Security Policy.  The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not     affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.
    OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Fixed in OpenSSL 3.3.6     (Affected since 3.3.0). (CVE-2025-69421)

  - Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an     ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer     dereference when processing a malformed TimeStamp Response file.  Impact summary: An application calling     TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or     NULL pointer when reading, resulting in a Denial of Service.  The functions ossl_ess_get_signing_cert()     and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type.
    When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE     union, causing a crash.  Exploiting this vulnerability requires an attacker to provide a malformed     TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161)     is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue     was assessed as Low severity.  The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,     as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary.  OpenSSL 3.6, 3.5,     3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.  OpenSSL 1.0.2 is not affected by this issue. Fixed     in OpenSSL 3.3.6 (Affected since 3.3.0). (CVE-2025-69420)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer     before decompression without checking against the configured certificate size limit. Impact summary: An     attacker can cause per-connection memory allocations of up to approximately 22 MiB and extra CPU work,     potentially leading to service degradation or resource exhaustion (Denial of Service). In affected     configurations, the peer-supplied uncompressed certificate length from a CompressedCertificate message is     used to grow a heap buffer prior to decompression. This length is not bounded by the max_cert_list     setting, which otherwise constrains certificate message sizes. An attacker can exploit this to cause large     per-connection allocations followed by handshake failure. No memory corruption or information disclosure     occurs. This issue only affects builds where TLS 1.3 certificate compression is compiled in (i.e., not     OPENSSL_NO_COMP_ALG) and at least one compression algorithm (brotli, zlib, or zstd) is available, and     where the compression extension is negotiated. Both clients receiving a server CompressedCertificate and     servers in mutual TLS scenarios receiving a client CompressedCertificate are affected. Servers that do not     request client certificates are not vulnerable to client-initiated attacks. Users can mitigate this issue     by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION to disable receiving compressed certificates. The FIPS     modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as the TLS implementation is outside the     OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue. OpenSSL 3.0,     1.1.1 and 1.0.2 are not affected by this issue. (CVE-2025-66199)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of OpenSSL installed on the remote host is prior to 3.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.6.1 advisory.

  - Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server     receives an unknown cipher suite from the peer, a NULL dereference occurs.  Impact summary: A NULL pointer     dereference leads to abnormal termination of the running process causing Denial of Service.  Some     applications call SSL_CIPHER_find() from the client_hello_cb callback on the cipher ID received from the     peer. If this is done with an SSL object implementing the QUIC protocol, NULL pointer dereference will     happen if the examined cipher ID is unknown or unsupported.  As it is not very common to call this     function in applications using the QUIC  protocol and the worst outcome is Denial of Service, the issue     was assessed as Low severity.  The vulnerable code was introduced in the 3.2 version with the addition of     the QUIC protocol support.  The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as     the QUIC implementation is outside the OpenSSL FIPS module boundary.  OpenSSL 3.6, 3.5, 3.4 and 3.3 are     vulnerable to this issue.  OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. Fixed in OpenSSL     3.6.1 (Affected since 3.6.0). (CVE-2025-15468)

  - Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data     where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL     pointer dereference when processing malformed PKCS#7 data.  Impact summary: An application performing     signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can     be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service.  The     function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its     type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the     ASN1_TYPE union, causing a crash.  Exploiting this vulnerability requires an attacker to provide a     malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of     Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons     the issue was assessed as Low severity.  The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by     this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary.  OpenSSL     3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Fixed in OpenSSL 3.6.1 (Affected     since 3.6.0). (CVE-2026-22796)

  - Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed     PKCS#12 file.  Impact summary: An application processing a malformed PKCS#12 file can be caused to     dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service.  A type confusion     vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first     validating the type, causing an invalid pointer read.  The location is constrained to a 1-byte address     space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This     range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably     result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or     application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12     files in applications as they are usually used to store private keys which are trusted by definition. For     these reasons, the issue was assessed as Low severity.  The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not     affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary.  OpenSSL     3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.  OpenSSL 1.0.2 is not affected by this     issue. Fixed in OpenSSL 3.6.1 (Affected since 3.6.0). (CVE-2026-22795)

  - Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the     PKCS12_item_decrypt_d2i_ex() function.  Impact summary: A NULL pointer dereference can trigger a crash     which leads to Denial of Service for an application processing PKCS#12 files.  The     PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before     dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter     can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to     achieve code execution or memory disclosure.  Exploiting this issue requires an attacker to provide a     malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low     severity according to our Security Policy.  The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not     affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.
    OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Fixed in OpenSSL 3.6.1     (Affected since 3.6.0). (CVE-2025-69421)

  - Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an     ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer     dereference when processing a malformed TimeStamp Response file.  Impact summary: An application calling     TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or     NULL pointer when reading, resulting in a Denial of Service.  The functions ossl_ess_get_signing_cert()     and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type.
    When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE     union, causing a crash.  Exploiting this vulnerability requires an attacker to provide a malformed     TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161)     is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue     was assessed as Low severity.  The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,     as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary.  OpenSSL 3.6, 3.5,     3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.  OpenSSL 1.0.2 is not affected by this issue. Fixed     in OpenSSL 3.6.1 (Affected since 3.6.0). (CVE-2025-69420)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of OpenSSL installed on the remote host is prior to 3.5.5. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.5.5 advisory.

  - Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server     receives an unknown cipher suite from the peer, a NULL dereference occurs.  Impact summary: A NULL pointer     dereference leads to abnormal termination of the running process causing Denial of Service.  Some     applications call SSL_CIPHER_find() from the client_hello_cb callback on the cipher ID received from the     peer. If this is done with an SSL object implementing the QUIC protocol, NULL pointer dereference will     happen if the examined cipher ID is unknown or unsupported.  As it is not very common to call this     function in applications using the QUIC  protocol and the worst outcome is Denial of Service, the issue     was assessed as Low severity.  The vulnerable code was introduced in the 3.2 version with the addition of     the QUIC protocol support.  The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as     the QUIC implementation is outside the OpenSSL FIPS module boundary.  OpenSSL 3.6, 3.5, 3.4 and 3.3 are     vulnerable to this issue.  OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. Fixed in OpenSSL     3.5.5 (Affected since 3.5.0). (CVE-2025-15468)

  - Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data     where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL     pointer dereference when processing malformed PKCS#7 data.  Impact summary: An application performing     signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can     be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service.  The     function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its     type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the     ASN1_TYPE union, causing a crash.  Exploiting this vulnerability requires an attacker to provide a     malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of     Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons     the issue was assessed as Low severity.  The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by     this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary.  OpenSSL     3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Fixed in OpenSSL 3.5.5 (Affected     since 3.5.0). (CVE-2026-22796)

  - Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed     PKCS#12 file.  Impact summary: An application processing a malformed PKCS#12 file can be caused to     dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service.  A type confusion     vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first     validating the type, causing an invalid pointer read.  The location is constrained to a 1-byte address     space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This     range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably     result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or     application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12     files in applications as they are usually used to store private keys which are trusted by definition. For     these reasons, the issue was assessed as Low severity.  The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not     affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary.  OpenSSL     3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.  OpenSSL 1.0.2 is not affected by this     issue. Fixed in OpenSSL 3.5.5 (Affected since 3.5.0). (CVE-2026-22795)

  - Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the     PKCS12_item_decrypt_d2i_ex() function.  Impact summary: A NULL pointer dereference can trigger a crash     which leads to Denial of Service for an application processing PKCS#12 files.  The     PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before     dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter     can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to     achieve code execution or memory disclosure.  Exploiting this issue requires an attacker to provide a     malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low     severity according to our Security Policy.  The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not     affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.
    OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Fixed in OpenSSL 3.5.5     (Affected since 3.5.0). (CVE-2025-69421)

  - Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an     ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer     dereference when processing a malformed TimeStamp Response file.  Impact summary: An application calling     TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or     NULL pointer when reading, resulting in a Denial of Service.  The functions ossl_ess_get_signing_cert()     and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type.
    When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE     union, causing a crash.  Exploiting this vulnerability requires an attacker to provide a malformed     TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161)     is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue     was assessed as Low severity.  The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,     as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary.  OpenSSL 3.6, 3.5,     3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.  OpenSSL 1.0.2 is not affected by this issue. Fixed     in OpenSSL 3.5.5 (Affected since 3.5.0). (CVE-2025-69420)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of OpenSSL installed on the remote host is prior to 3.4.4. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.4.4 advisory.

  - Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server     receives an unknown cipher suite from the peer, a NULL dereference occurs.  Impact summary: A NULL pointer     dereference leads to abnormal termination of the running process causing Denial of Service.  Some     applications call SSL_CIPHER_find() from the client_hello_cb callback on the cipher ID received from the     peer. If this is done with an SSL object implementing the QUIC protocol, NULL pointer dereference will     happen if the examined cipher ID is unknown or unsupported.  As it is not very common to call this     function in applications using the QUIC  protocol and the worst outcome is Denial of Service, the issue     was assessed as Low severity.  The vulnerable code was introduced in the 3.2 version with the addition of     the QUIC protocol support.  The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as     the QUIC implementation is outside the OpenSSL FIPS module boundary.  OpenSSL 3.6, 3.5, 3.4 and 3.3 are     vulnerable to this issue.  OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. Fixed in OpenSSL     3.4.4 (Affected since 3.4.0). (CVE-2025-15468)

  - Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data     where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL     pointer dereference when processing malformed PKCS#7 data.  Impact summary: An application performing     signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can     be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service.  The     function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its     type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the     ASN1_TYPE union, causing a crash.  Exploiting this vulnerability requires an attacker to provide a     malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of     Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons     the issue was assessed as Low severity.  The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by     this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary.  OpenSSL     3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Fixed in OpenSSL 3.4.4 (Affected     since 3.4.0). (CVE-2026-22796)

  - Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed     PKCS#12 file.  Impact summary: An application processing a malformed PKCS#12 file can be caused to     dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service.  A type confusion     vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first     validating the type, causing an invalid pointer read.  The location is constrained to a 1-byte address     space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This     range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably     result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or     application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12     files in applications as they are usually used to store private keys which are trusted by definition. For     these reasons, the issue was assessed as Low severity.  The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not     affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary.  OpenSSL     3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.  OpenSSL 1.0.2 is not affected by this     issue. Fixed in OpenSSL 3.4.4 (Affected since 3.4.0). (CVE-2026-22795)

  - Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the     PKCS12_item_decrypt_d2i_ex() function.  Impact summary: A NULL pointer dereference can trigger a crash     which leads to Denial of Service for an application processing PKCS#12 files.  The     PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before     dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter     can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to     achieve code execution or memory disclosure.  Exploiting this issue requires an attacker to provide a     malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low     severity according to our Security Policy.  The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not     affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.
    OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Fixed in OpenSSL 3.4.4     (Affected since 3.4.0). (CVE-2025-69421)

  - Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an     ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer     dereference when processing a malformed TimeStamp Response file.  Impact summary: An application calling     TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or     NULL pointer when reading, resulting in a Denial of Service.  The functions ossl_ess_get_signing_cert()     and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type.
    When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE     union, causing a crash.  Exploiting this vulnerability requires an attacker to provide a malformed     TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161)     is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue     was assessed as Low severity.  The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,     as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary.  OpenSSL 3.6, 3.5,     3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.  OpenSSL 1.0.2 is not affected by this issue. Fixed     in OpenSSL 3.4.4 (Affected since 3.4.0). (CVE-2025-69420)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
298229	SUSE SLES16 Security Update : openssl-3 (SUSE-SU-2026:20223-1)	Nessus	SuSE Local Security Checks	high
297791	openSUSE 16 Security Update : openssl-3 (openSUSE-SU-2026:20152-1)	Nessus	SuSE Local Security Checks	high
297562	AlmaLinux 9 : openssl (ALSA-2026:1473)	Nessus	Alma Linux Local Security Checks	high
297451	Fedora 43 : openssl (2026-5f7d0a5656)	Nessus	Fedora Local Security Checks	high
297342	Oracle Linux 9 : openssl (ELSA-2026-50080)	Nessus	Oracle Linux Local Security Checks	high
297341	Oracle Linux 10 : openssl (ELSA-2026-50081)	Nessus	Oracle Linux Local Security Checks	high
297287	RockyLinux 9 : openssl (RLSA-2026:1473)	Nessus	Rocky Linux Local Security Checks	high
297284	RockyLinux 10 : openssl (RLSA-2026:1472)	Nessus	Rocky Linux Local Security Checks	high
297271	Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : OpenSSL vulnerabilities (USN-7980-1)	Nessus	Ubuntu Local Security Checks	high
297240	Photon OS 5.0: Openssl PHSA-2026-5.0-0747	Nessus	PhotonOS Local Security Checks	high
297213	MiracleLinux 9 : openssl-3.5.1-7.el9_7.ML.1 (AXSA:2026-105:04)	Nessus	Miracle Linux Local Security Checks	high
297209	FreeBSD : OpenSSL -- Multiple vulnerabilities (4b824428-fb93-11f0-b194-8447094a420f)	Nessus	FreeBSD Local Security Checks	high
297157	Oracle Linux 9 : openssl (ELSA-2026-50075)	Nessus	Oracle Linux Local Security Checks	high
297106	Oracle Linux 9 : openssl (ELSA-2026-1473)	Nessus	Oracle Linux Local Security Checks	high
297105	Oracle Linux 10 : openssl (ELSA-2026-1472)	Nessus	Oracle Linux Local Security Checks	high
297055	AlmaLinux 10 : openssl (ALSA-2026:1472)	Nessus	Alma Linux Local Security Checks	high
297044	RHEL 10 : openssl (RHSA-2026:1472)	Nessus	Red Hat Local Security Checks	high
297022	RHEL 9 : openssl (RHSA-2026:1473)	Nessus	Red Hat Local Security Checks	high
296910	Debian dsa-6113 : libcrypto3-udeb - security update	Nessus	Debian Local Security Checks	high
296784	OpenSSL 3.3.0 < 3.3.6 Multiple Vulnerabilities	Nessus	Web Servers	high
296771	Linux Distros Unpatched Vulnerability : CVE-2025-66199	Nessus	Misc.	medium
296770	OpenSSL 3.6.0 < 3.6.1 Multiple Vulnerabilities	Nessus	Web Servers	high
296768	OpenSSL 3.5.0 < 3.5.5 Multiple Vulnerabilities	Nessus	Web Servers	high
296766	OpenSSL 3.4.0 < 3.4.4 Multiple Vulnerabilities	Nessus	Web Servers	high

Detections

Analytics

CVE-2025-66199

medium

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

medium

high

high

high