The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Issue summary: When an application drives an AES-OCB context through the public EVP_Cipher() one-shot     interface, the application-supplied initialisation vector (IV) is silently discarded. Impact summary:
    Every message encrypted under the same key uses the same effective nonce regardless of the IV supplied by     the caller, resulting in (key, nonce) reuse and loss of confidentiality. If the same code path is used to     compute the authentication tag, the tag depends only on the (key, IV) pair and not on the plaintext or     ciphertext, allowing universal forgery of arbitrary ciphertext from a single captured message. OpenSSL     provides two ways to drive a cipher: the documented streaming interface (EVP_CipherUpdate /     EVP_CipherFinal_ex) and a lower-level one-shot, EVP_Cipher(), whose documentation explicitly recommends     against use by applications in favour of EVP_CipherUpdate() and EVP_CipherFinal_ex(). The OCB provider's     streaming handler flushes the application-supplied IV into the OCB context before processing data; the     one-shot handler did not. Every call to EVP_Cipher() on an AES-OCB context therefore ran with the all-zero     key-derived offset state left by cipher initialisation, regardless of the caller's IV. If     EVP_EncryptFinal_ex() is subsequently used to obtain the authentication tag, the deferred IV setup runs at     that point and clears the running checksum that should have been accumulated over the plaintext. The     resulting tag is a function of (key, IV) only and verifies against any ciphertext produced under the same     (key, IV) pair. The OpenSSL SSL/TLS implementation is not affected: AES-OCB is not a TLS cipher suite, and     libssl does not call EVP_Cipher() in any case. Applications that drive AES-OCB through the documented     streaming AEAD API (EVP_CipherUpdate / EVP_CipherFinal_ex) are not affected. Only applications that     combine the AES-OCB cipher with the EVP_Cipher() one-shot API are vulnerable. The FIPS modules in 4.0,     3.6, 3.5, 3.4 and 3.0 are not affected by this issue, as AES-OCB is outside the OpenSSL FIPS module     boundary. (CVE-2026-45445)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-45445

high Nessus Plugin ID 320335

Version 1.6

Version 1.5

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Jun 16, 2026, 2:46 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606161446
Version 1.5 Jun 12, 2026, 7:27 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606120727
Version 1.3 Jun 11, 2026, 6:45 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606111845
Version 1.2 Jun 11, 2026, 6:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606110606
Version 1.1 Jun 10, 2026, 6:51 AM New Plugin Feed: 202606100651