libressl was updated to version 2.2.1 to fix 16 security issues.

LibreSSL is a fork of OpenSSL. Because of that CVEs affecting OpenSSL often also affect LibreSSL.

These security issues were fixed :

  - CVE-2014-3570: The BN_sqr implementation in OpenSSL     before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before     1.0.1k did not properly calculate the square of a BIGNUM     value, which might make it easier for remote attackers     to defeat cryptographic protection mechanisms via     unspecified vectors, related to crypto/bn/asm/mips.pl,     crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c     (bsc#912296).

  - CVE-2014-3572: The ssl3_get_key_exchange function in     s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before     1.0.0p, and 1.0.1 before 1.0.1k allowed remote SSL     servers to conduct ECDHE-to-ECDH downgrade attacks and     trigger a loss of forward secrecy by omitting the     ServerKeyExchange message (bsc#912015).

  - CVE-2015-1792: The do_free_upto function in     crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0     before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before     1.0.2b allowed remote attackers to cause a denial of     service (infinite loop) via vectors that trigger a NULL     value of a BIO data structure, as demonstrated by an     unrecognized X.660 OID for a hash function (bsc#934493).

  - CVE-2014-8275: OpenSSL before 0.9.8zd, 1.0.0 before     1.0.0p, and 1.0.1 before 1.0.1k did not enforce certain     constraints on certificate data, which allowed remote     attackers to defeat a fingerprint-based     certificate-blacklist protection mechanism by including     crafted data within a certificate's unsigned portion,     related to crypto/asn1/a_verify.c,     crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, and     crypto/x509/x_all.c (bsc#912018).

  - CVE-2015-0209: Use-after-free vulnerability in the     d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in     OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1     before 1.0.1m, and 1.0.2 before 1.0.2a might allowed     remote attackers to cause a denial of service (memory     corruption and application crash) or possibly have     unspecified other impact via a malformed Elliptic Curve     (EC) private-key file that is improperly handled during     import (bsc#919648).

  - CVE-2015-1789: The X509_cmp_time function in     crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0     before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before     1.0.2b allowed remote attackers to cause a denial of     service (out-of-bounds read and application crash) via a     crafted length field in ASN1_TIME data, as demonstrated     by an attack against a server that supports client     authentication with a custom verification callback     (bsc#934489).

  - CVE-2015-1788: The BN_GF2m_mod_inv function in     crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0     before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before     1.0.2b did not properly handle ECParameters structures     in which the curve is over a malformed binary polynomial     field, which allowed remote attackers to cause a denial     of service (infinite loop) via a session that used an     Elliptic Curve algorithm, as demonstrated by an attack     against a server that supports client authentication     (bsc#934487).

  - CVE-2015-1790: The PKCS7_dataDecodefunction in     crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0     before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before     1.0.2b allowed remote attackers to cause a denial of     service (NULL pointer dereference and application crash)     via a PKCS#7 blob that used ASN.1 encoding and lacks     inner EncryptedContent data (bsc#934491).

  - CVE-2015-0287: The ASN1_item_ex_d2i function in     crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0     before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before     1.0.2a did not reinitialize CHOICE and ADB data     structures, which might allowed attackers to cause a     denial of service (invalid write operation and memory     corruption) by leveraging an application that relies on     ASN.1 structure reuse (bsc#922499).

  - CVE-2015-0286: The ASN1_TYPE_cmp function in     crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0     before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before     1.0.2a did not properly perform boolean-type     comparisons, which allowed remote attackers to cause a     denial of service (invalid read operation and     application crash) via a crafted X.509 certificate to an     endpoint that used the certificate-verification feature     (bsc#922496).

  - CVE-2015-0289: The PKCS#7 implementation in OpenSSL     before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before     1.0.1m, and 1.0.2 before 1.0.2a did not properly handle     a lack of outer ContentInfo, which allowed attackers to     cause a denial of service (NULL pointer dereference and     application crash) by leveraging an application that     processes arbitrary PKCS#7 data and providing malformed     data with ASN.1 encoding, related to     crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c     (bsc#922500).

  - CVE-2015-0288: The X509_to_X509_REQ function in     crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0     before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before     1.0.2a might allowed attackers to cause a denial of     service (NULL pointer dereference and application crash)     via an invalid certificate key (bsc#920236).

  - CVE-2014-8176: The dtls1_clear_queues function in     ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before     1.0.0m, and 1.0.1 before 1.0.1h frees data structures     without considering that application data can arrive     between a ChangeCipherSpec message and a Finished     message, which allowed remote DTLS peers to cause a     denial of service (memory corruption and application     crash) or possibly have unspecified other impact via     unexpected application data (bsc#934494).

  - CVE-2015-4000: The TLS protocol 1.2 and earlier, when a     DHE_EXPORT ciphersuite is enabled on a server but not on     a client, did not properly convey a DHE_EXPORT choice,     which allowed man-in-the-middle attackers to conduct     cipher-downgrade attacks by rewriting a ClientHello with     DHE replaced by DHE_EXPORT and then rewriting a     ServerHello with DHE_EXPORT replaced by DHE, aka the     'Logjam' issue (bsc#931600).

  - CVE-2015-0205: The ssl3_get_cert_verify function in     s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1     before 1.0.1k accepts client authentication with a     Diffie-Hellman (DH) certificate without requiring a     CertificateVerify message, which allowed remote     attackers to obtain access without knowledge of a     private key via crafted TLS Handshake Protocol traffic     to a server that recognizes a Certification Authority     with DH support (bsc#912293).

  - CVE-2015-0206: Memory leak in the dtls1_buffer_record     function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and     1.0.1 before 1.0.1k allowed remote attackers to cause a     denial of service (memory consumption) by sending many     duplicate records for the next epoch, leading to failure     of replay detection (bsc#912292).

openssl was updated to fix six security issues.

The following vulnerabilities were fixed :

  - CVE-2015-4000: The Logjam Attack / weakdh.org. Rject     connections with DH parameters shorter than 768 bits,     generates 2048-bit DH parameters by default.
    (boo#931698)

  - CVE-2015-1788: Malformed ECParameters causes infinite     loop (boo#934487)

  - CVE-2015-1789: Exploitable out-of-bounds read in     X509_cmp_time (boo#934489)

  - CVE-2015-1790: PKCS7 crash with missing EnvelopedContent     (boo#934491)

  - CVE-2015-1792: CMS verify infinite loop with unknown     hash function (boo#934493)

  - CVE-2015-1791: race condition in NewSessionTicket     (boo#933911)

  - CVE-2015-3216: Crash in ssleay_rand_bytes due to locking     regression (boo#933898)

OpenSSL 0.9.8j was updated to fix several security issues.

CVE-2015-4000: The Logjam Attack ( weakdh.org ) has been addressed by rejecting connections with DH parameters shorter than 1024 bits. We now also generate 2048-bit DH parameters by default.

CVE-2015-1788: Malformed ECParameters could cause an infinite loop.

CVE-2015-1789: An out-of-bounds read in X509_cmp_time was fixed.

CVE-2015-1790: A PKCS7 decoder crash with missing EnvelopedContent was fixed.

CVE-2015-1792: A CMS verification infinite loop when using an unknown hash function was fixed.

CVE-2015-1791: Fixed a race condition in NewSessionTicket creation.

CVE-2015-3216: Fixed a potential crash in ssleay_rand_bytes due to locking regression.

fixed a timing side channel in RSA decryption (bnc#929678)

Additional changes :

In the default SSL cipher string EXPORT ciphers are now disabled. This will only get active if applications get rebuilt and actually use this string. (bnc#931698)

Added the ECC ciphersuites to the DEFAULT cipher class (bnc#879179)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of OpenSSL installed on the remote host is prior to 1.0.0s. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.0s advisory.

  - The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1     before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite     loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized     X.660 OID for a hash function. (CVE-2015-1792)

  - The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s,     1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL     pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner     EncryptedContent data. (CVE-2015-1790)

  - The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1     before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds     read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack     against a server that supports client authentication with a custom verification callback. (CVE-2015-1789)

  - Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg,     1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client,     allows remote attackers to cause a denial of service (double free and application crash) or possibly have     unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been     obtained earlier. (CVE-2015-1791)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s,     1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL     pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner     EncryptedContent data. (CVE-2015-1790)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is running a version of Mac OS X 10.8.5 or 10.9.5 that is missing Security Update 2015-006. It is, therefore, affected by multiple vulnerabilities in the following components :

  - apache
  - apache_mod_php
  - CoreText
  - FontParser
  - Libinfo
  - libxml2
  - OpenSSL
  - perl
  - PostgreSQL
  - QL Office
  - Quartz Composer Framework
  - QuickTime 7
  - SceneKit

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

ID	Name	Product	Family	Published	Updated	Severity
84998	openSUSE Security Update : libressl (openSUSE-2015-507) (Logjam)	Nessus	SuSE Local Security Checks	7/27/2015	12/5/2022	high
84414	openSUSE Security Update : openssl (openSUSE-2015-447) (Logjam)	Nessus	SuSE Local Security Checks	6/26/2015	12/5/2022	high
84561	SUSE SLES11 Security Update : OpenSSL (SUSE-SU-2015:1184-2) (Logjam)	Nessus	SuSE Local Security Checks	7/7/2015	12/5/2022	high
84152	OpenSSL 1.0.0 < 1.0.0s Multiple Vulnerabilities	Nessus	Web Servers	6/12/2015	10/23/2024	high
218426	Linux Distros Unpatched Vulnerability : CVE-2015-1790	Nessus	Misc.	3/4/2025	8/4/2026	medium
85409	Mac OS X Multiple Vulnerabilities (Security Update 2015-006)	Nessus	MacOS X Local Security Checks	8/17/2015	5/28/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

medium

high