The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3106-1 advisory.

    - CVE-2024-6119: Fixed denial of service in X.509 name checks (bsc#1229465)

    Other fixes:

    - FIPS: Deny SHA-1 signature verification in FIPS provider (bsc#1221365).
    - FIPS: RSA keygen PCT requirements.
    - FIPS: Check that the fips provider is available before setting       it as the default provider in FIPS mode (bsc#1220523).
    - FIPS: Port openssl to use jitterentropy (bsc#1220523).
    - FIPS: Block non-Approved Elliptic Curves (bsc#1221786).
    - FIPS: Service Level Indicator (bsc#1221365).
    - FIPS: Output the FIPS-validation name and module version which uniquely       identify the FIPS validated module (bsc#1221751).
    - FIPS: Add required selftests: (bsc#1221760).
    - FIPS: DH: Disable FIPS 186-4 Domain Parameters (bsc#1221821).
    - FIPS: Recommendation for Password-Based Key Derivation (bsc#1221827).
    - FIPS: Zero initialization required (bsc#1221752).
    - FIPS: Reseed DRBG (bsc#1220690, bsc#1220693, bsc#1220696).
    - FIPS: NIST SP 800-56Brev2 (bsc#1221824).
    - FIPS: Approved Modulus Sizes for RSA Digital Signature for FIPS 186-4 (bsc#1221787).
    - FIPS: Port openssl to use jitterentropy (bsc#1220523).
    - FIPS: NIST SP 800-56Arev3 (bsc#1221822).
    - FIPS: Error state has to be enforced (bsc#1221753).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openssl-3 (SUSE-SU-2024:3106-1)

high Nessus Plugin ID 206575

Version 1.4