Detections
Analytics

Echo: openssl-3.0.9: security update to 3.0.9+e1openssl-3.1.0: security update to 3.1.0+e1openssl-3.5.0: security update to 3.5.0+e1

low Tenable Cloud Security Plugin ID 478507

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not
 properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key
 carrying the victim's p and g parameters, a forged q = r (a small prime factor of the cofactor
 (p−1)/q_local), and a public value Y of order r can recover the victim's private key after a small number
 of key exchange attempts. When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the
 subgroup membership check Y^q ≡ 1 (mod p) is performed using the peer's own q parameter, not the local
 key's q. The peer's domain parameters are then matched against the domain parameters of the private key,
 but the value of q is not compared. A malicious peer who presents an X9.42 key carrying the victim's p, g,
 a forged q = r (a small prime factor of the cofactor), and a public value Y of order r passes all checks.
 The shared secret then takes only r distinct values, leaking priv mod r. Repeating for each small-prime
 factor of the cofactor and combining via CRT recovers the full private key (Lim–Lee / small-subgroup-
 confinement attack). The realistic attack surface is narrow: principally CMP deployments with long-lived
 RA/CA DHX keys and bespoke enterprise or government applications using X9.42 DHX static keys with
 interactive protocols and therefore this issue was assigned Low severity. The FIPS modules in 4.0, 3.6,
 3.5, 3.4, 3.1.2 and 3.0 are affected by this issue. (CVE-2026-42770)

Solution

Update the openssl-3.0.9 library and its related packages to version 3.0.9+e1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-42770

Plugin Details

Severity: Low

ID: 478507

Version: Revision 1.1

Type: Local

Published: 11/5/2026

Updated: 11/5/2026

Risk Information

VPR

Risk Factor: Low

Score: 3.2

Percentile: 51.08

CVSS v2

Risk Factor: Medium

Base Score: 5.4

Temporal Score: 4

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2026-42770

CVSS v3

Risk Factor: Low

Base Score: 3.7

Temporal Score: 3.2

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 11/5/2026

Vulnerability Publication Date: 6/9/2026

Reference Information

CVE: CVE-2026-42770