Detections
Analytics

Echo: openssl-1.1.1c: security update to 1.1.1c+e1openssl-1.1.1g: security update to 1.1.1g+e1openssl-1.1.1k: security update to 1.1.1k+e1openssl-3.0.9: security update to 3.0.9+e1openssl-3.1.0: security update to 3.1.0+e1openssl-3.5.0: security update to 3.5.0+e1

high Tenable Self-Hosted Container Security Plugin ID 478422

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied
 CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in
 kek_unwrap_key(). Impact summary: A heap buffer over-read may trigger a crash which leads to Denial of
 Service for an application if the input buffer ends at a memory page boundary and the following page is
 unmapped. There is no information disclosure as the over-read bytes are not revealed to the attacker. The
 key unwrapping function performs a check-byte test as specified in the RFC that reads 7 bytes from a heap
 allocation that is based on the wrapped key length from the message. There is a minimum length check based
 on the block length of the wrapping cipher. However the cipher is selected from an OID carried in the
 attacker's PWRI keyEncryptionAlgorithm with no requirement that the cipher be a block cipher. When an
 attacker selects a stream-mode cipher the guard will be ineffective and the allocated buffer containing
 the unwrapped key can be too small to fit the check-bytes specified in the RFC and a buffer over-read can
 happen. Applications calling CMS_decrypt() or CMS_decrypt_set1_password() (equivalently openssl cms
 -decrypt -pwri_password ...) on untrusted CMS data are vulnerable to this issue. No password knowledge is
 required: the over-read happens during the unwrap attempt before any authentication succeeds. The over-
 read is limited to a few bytes and is not written to output, so there is no information disclosure.
 Triggering a crash requires the allocation to border unmapped memory, which is unlikely with the normal
 allocator. The FIPS modules are not affected by this issue. (CVE-2026-9076)

Solution

Update the openssl-1.1.1c library and its related packages to version 1.1.1c+e1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-9076

Plugin Details

Severity: High

ID: 478422

Version: Revision 1.1

Type: Local

Published: 11/5/2026

Updated: 11/5/2026

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 93.74

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2026-9076

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 11/5/2026

Vulnerability Publication Date: 6/9/2026

Reference Information

CVE: CVE-2026-9076