The 12.4.0.0 versions of Enterprise Manager Ops Center installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2020 CPU advisory.

  - Vulnerability in the Enterprise Manager Ops Center     product of Oracle Enterprise Manager (component:
    Networking (Apache HTTP Server)). The supported version     that is affected is 12.4.0.0. Easily exploitable     vulnerability allows unauthenticated attacker with     network access via HTTP to compromise Enterprise Manager     Ops Center. Successful attacks of this vulnerability can     result in unauthorized read access to a subset of     Enterprise Manager Ops Center accessible data (CVE-2020-1934).

  - Vulnerability in the Enterprise Manager Ops Center     product of Oracle Enterprise Manager (component:
    Networking (OpenSSL)). The supported version that is     affected is 12.4.0.0. Easily exploitable vulnerability     allows unauthenticated attacker with network access via     HTTPS to compromise Enterprise Manager Ops Center.
    Successful attacks of this vulnerability can result in     unauthorized read access to a subset of Enterprise     Manager Ops Center accessible data (CVE-2019-1551).

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the remote Juniper Junos device is affected by a vulnerability in the OpenSSL library. There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - OpenSSL has internal defaults for a directory tree     where it can find a configuration file as well as     certificates used for verification in TLS. This     directory is most commonly referred to as OPENSSLDIR,     and is configurable with the --prefix / --openssldir     configuration options. For OpenSSL versions 1.1.0 and     1.1.1, the mingw configuration targets assume that     resulting programs and libraries are installed in a     Unix-like environment and the default prefix for     program installation as well as for OPENSSLDIR should     be '/usr/local'. However, mingw programs are Windows     programs, and as such, find themselves looking at     sub-directories of 'C:/usr/local', which may be world     writable, which enables untrusted users to modify     OpenSSL's default configuration, insert CA     certificates, modify (or even replace) existing engine     modules, etc. For OpenSSL 1.0.2, '/usr/local/ssl' is     used as default for OPENSSLDIR on all Unix and Windows     targets, including Visual C builds. However, some build     instructions for the diverse Windows targets on 1.0.2     encourage you to specify your own --prefix. OpenSSL     versions 1.1.1, 1.1.0 and 1.0.2 are affected by this     issue. Due to the limited scope of affected deployments     this has been assessed as low severity and therefore we     are not creating new releases at this time. Fixed in     OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in     OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in     OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).(CVE-2019-1552)

  - An integer overflow was found in the x64_64 Montgomery     squaring procedure used in exponentiation with 512-bit     moduli. As per upstream: * No EC algorithms are     affected. * Attacks against 2-prime RSA1024, 3-prime     RSA1536, and DSA1024 as a result of this defect would     be very difficult to perform and are not believed     likely. * Attacks against DH512 are considered just     feasible. However, for an attack the target would have     to re-use the DH512 private key, which is not     recommended anyway. * Also applications directly using     the low level API BN_mod_exp may be affected if they     use BN_FLG_CONSTTIME(CVE-2019-1551)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of openssl installed on the remote host is prior to 1.0.2k-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1687 advisory.

    An integer overflow was found in the x64_64 Montgomery squaring procedure used in exponentiation with     512-bit moduli.  As per upstream:* No EC algorithms are affected.* Attacks against 2-prime RSA1024,     3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not     believed likely.* Attacks against DH512 are considered just feasible. However, for an attack the target     would have to re-use the DH512 private key, which is not recommended anyway.* Also applications directly     using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME (CVE-2019-1551)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Tenable SecurityCenter application installed on the remote host is earlier than 5.17.0. It is, therefore, affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues nor the stand-alone patch but has instead relied only on the application's self-reported version number.

According to the version of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - There is an overflow bug in the x64_64 Montgomery     squaring procedure used in exponentiation with 512-bit     moduli. No EC algorithms are affected. Analysis     suggests that attacks against 2-prime RSA1024, 3-prime     RSA1536, and DSA1024 as a result of this defect would     be very difficult to perform and are not believed     likely. Attacks against DH512 are considered just     feasible. However, for an attack the target would have     to re-use the DH512 private key, which is not     recommended anyway. Also applications directly using     the low level API BN_mod_exp may be affected if they     use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected     1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected     1.0.2-1.0.2t).(CVE-2019-1551)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Nessus Agent leverages third-party software to help provide underlying functionality. One of the third-party components (OpenSSL) was found to contain a multiple vulnerabilities, and updated versions have been made available by the providers.

Out of caution and in line with good practice, Tenable opted to upgrade the bundled library to address the potential impact of these issues in Nessus Agent. Nessus Agent 7.6.3 updates OpenSSL to version 1.1.1g to address the identified vulnerabilities.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4514 advisory.

  - openssl: Integer overflow in RSAZ modular exponentiation on x86_64 (CVE-2019-1551)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The OpenSSL project reports :

rsaz_512_sqr overflow bug on x86_64 (CVE-2019-1551) (Low) There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected.
Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME.

The version of OpenSSL installed on the remote host is prior to 1.0.2u. It is, therefore, affected by a vulnerability as referenced in the 1.0.2u advisory.

  - There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit     moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime     RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed     likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have     to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low     level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected     1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t). (CVE-2019-1551)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for openssl-1_0_0 fixes the following issues :

Security issue fixed :

CVE-2019-1551: Fixed an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli (bsc#1158809).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.02, has openssl packages installed that are affected by multiple vulnerabilities:

  - There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit     moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime     RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed     likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have     to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low     level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected     1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t). (CVE-2019-1551)

  - The X.509 GeneralName type is a generic type for representing different types of names. One of those name     types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different     instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both     GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a     possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1)     Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in     an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp     authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an     attacker can control both items being compared then that attacker could trigger a crash. For example if     the attacker can trick a client or server into checking a malicious certificate against a malicious CRL     then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a     certificate. This checking happens prior to the signatures on the certificate and CRL being verified.
    OpenSSL's s_server, s_client and verify tools have support for the -crl_download option which implements     automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an     unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of     EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will     accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue.
    Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected     1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w). (CVE-2020-1971)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
138594	Oracle Enterprise Manager Ops Center (Jul 2020 CPU)	Nessus	Misc.	7/17/2020	1/18/2023	medium
138909	Juniper Junos OpenSSL Security Advisory (JSA11025)	Nessus	Junos Local Security Checks	7/24/2020	10/13/2020	medium
135606	EulerOS Virtualization 3.0.2.2 : openssl (EulerOS-SA-2020-1444)	Nessus	Huawei Local Security Checks	4/16/2020	3/18/2024	medium
151794	Amazon Linux 2 : openssl (ALAS-2021-1687)	Nessus	Amazon Linux Local Security Checks	7/16/2021	12/11/2024	medium
144584	Tenable SecurityCenter < 5.17.0 Multiple Vulnerabilities (TNS-2020-11)	Nessus	Misc.	12/23/2020	11/7/2023	high
137467	EulerOS 2.0 SP2 : openssl (EulerOS-SA-2020-1625)	Nessus	Huawei Local Security Checks	6/17/2020	3/7/2024	medium
137757	Tenable Nessus Agent < 7.6.3 Third Party Vulnerability (OpenSSL) (TNS-2020-03)	Nessus	Misc.	6/24/2020	4/4/2026	medium
145854	CentOS 8 : openssl (CESA-2020:4514)	Nessus	CentOS Local Security Checks	2/1/2021	3/23/2021	medium
132351	FreeBSD : OpenSSL -- Overflow vulnerability (d778ddb0-2338-11ea-a1c7-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	12/23/2019	4/2/2024	medium
132726	OpenSSL 1.0.2 < 1.0.2u Vulnerability	Nessus	Web Servers	1/9/2020	10/23/2024	medium
132851	SUSE SLED15 / SLES15 Security Update : openssl-1_0_0 (SUSE-SU-2020:0064-1)	Nessus	SuSE Local Security Checks	1/13/2020	4/1/2024	medium
147241	NewStart CGSL MAIN 6.02 : openssl Multiple Vulnerabilities (NS-SA-2021-0086)	Nessus	NewStart CGSL Local Security Checks	3/10/2021	12/5/2022	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

high

medium

medium

medium

medium

medium

medium

medium