Several vulnerabilities were discovered in OpenSSL :

  - CVE-2016-7056     A local timing attack was discovered against ECDSA     P-256.

  - CVE-2016-8610     It was discovered that no limit was imposed on alert     packets during an SSL handshake.

  - CVE-2017-3731     Robert Swiecki discovered that the RC4-MD5 cipher when     running on 32 bit systems could be forced into an     out-of-bounds read, resulting in denial of service.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3183-2 advisory.

    USN-3183-1 fixed CVE-2016-8610 in GnuTLS in Ubuntu 16.04 LTS and Ubuntu 16.10. This update provides the     corresponding update for Ubuntu 12.04 LTS and Ubuntu 14.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0574 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    The following packages have been upgraded to a later upstream version: gnutls (2.12.23). (BZ#1321112,     BZ#1326073, BZ#1415682, BZ#1326389)

    Security Fix(es):

    * A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets     during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an     excessive amount of CPU and fail to accept connections form other clients. (CVE-2016-8610)

    * Multiple flaws were found in the way gnutls processed OpenPGP certificates. An attacker could create     specially crafted OpenPGP certificates which, when parsed by gnutls, would cause it to crash.
    (CVE-2017-5335, CVE-2017-5336, CVE-2017-5337)

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 6.9 Release Notes     and Red Hat Enterprise Linux 6.9 Technical Notes linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for gnutls is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

The following packages have been upgraded to a later upstream version:
gnutls (2.12.23). (BZ#1321112, BZ#1326073, BZ#1415682, BZ#1326389)

Security Fix(es) :

* A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections form other clients. (CVE-2016-8610)

* Multiple flaws were found in the way gnutls processed OpenPGP certificates. An attacker could create specially crafted OpenPGP certificates which, when parsed by gnutls, would cause it to crash.
(CVE-2017-5335, CVE-2017-5336, CVE-2017-5337)

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 6.9 Release Notes and Red Hat Enterprise Linux 6.9 Technical Notes linked from the References section.

According to the version of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A denial of service flaw was found in the way the     TLS/SSL protocol defined processing of ALERT packets     during a connection handshake. A remote attacker could     use this flaw to make a TLS/SSL server consume an     excessive amount of CPU and fail to accept connections     form other clients.(CVE-2016-8610)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openssl098e package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The BN_bn2dec function in crypto/bn/bn_print.c in     OpenSSL before 1.1.0 does not properly validate     division results, which allows remote attackers to     cause a denial of service (out-of-bounds write and     application crash) or possibly have unspecified other     impact via unknown vectors.(CVE-2016-2182)

  - A denial of service flaw was found in the way the     TLS/SSL protocol defined processing of ALERT packets     during a connection handshake. A remote attacker could     use this flaw to make a TLS/SSL server consume an     excessive amount of CPU and fail to accept connections     form other clients.(CVE-2016-8610)

  - A flaw was found in the way malicious SSLv2 clients     could negotiate SSLv2 ciphers that were disabled on the     server. This could result in weak SSLv2 ciphers being     used for SSLv2 connections, making them vulnerable to     man-in-the-middle attacks.(CVE-2015-3197)

  - A padding oracle flaw was found in the Secure Sockets     Layer version 2.0 (SSLv2) protocol. An attacker could     potentially use this flaw to decrypt RSA-encrypted     cipher text from a connection using a newer SSL/TLS     protocol version, allowing them to decrypt such     connections. This cross-protocol attack is publicly     referred to as DROWN.(CVE-2016-0800)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
96842	Debian DSA-3773-1 : openssl - security update	Nessus	Debian Local Security Checks	1/30/2017	1/2/2026	medium
97853	Ubuntu 14.04 LTS : GnuTLS vulnerability (USN-3183-2)	Nessus	Ubuntu Local Security Checks	3/21/2017	9/3/2025	high
97874	RHEL 6 : gnutls (RHSA-2017:0574)	Nessus	Red Hat Local Security Checks	3/22/2017	12/29/2025	critical
97951	CentOS 6 : gnutls (CESA-2017:0574)	Nessus	CentOS Local Security Checks	3/27/2017	12/29/2025	critical
99886	EulerOS 2.0 SP2 : gnutls (EulerOS-SA-2017-1041)	Nessus	Huawei Local Security Checks	5/1/2017	12/22/2025	high
99884	EulerOS 2.0 SP2 : openssl098e (EulerOS-SA-2017-1039)	Nessus	Huawei Local Security Checks	5/1/2017	12/22/2025	critical

Detections

Analytics

Plugins Search

medium

high

critical

critical

high

critical