FreeBSD : FreeBSD -- TLS certificate store update due to eMudhra compromise (070a35ef-cd22-11f1-ada3-bc241121aa0a)

high Nessus Plugin ID 369539

Language:

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 070a35ef-cd22-11f1-ada3-bc241121aa0a advisory.

eMudhra generated several of its TLS intermediate CA certificates using a flawed procedure that used trivially small private keys.
The keys have been recovered by several parties and publicly disclosed. The intermediates are signed by the emSign ECC Root CA - G3 root certificate, which was included in the trusted certificate bundle.
The intermediates have been revoked, but OpenSSL does not check certificate revocation by default.
The corrected bundle marks emSign ECC Root CA - G3 as untrusted.
It also incorporates the other root certificate additions and removals in NSS 3.131.1.
An attacker able to intercept network traffic can use the compromised keys to issue a certificate that impersonates any TLS server, allowing the traffic to be read or modified without detection.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

Plugin Details

Severity: High

ID: 369539

File Name: freebsd_pkg_070a35efcd2211f1ada3bc241121aa0a.nasl

Version: 1.1

Type: Local

Family: FreeBSD Local Security Checks

Published: 10/21/2026

Updated: 10/21/2026

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Settings/ParanoidReport, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Exploit Ease: No known exploits are available

Patch Publication Date: 10/21/2026

Vulnerability Publication Date: 10/21/2026

Detections

Analytics