According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - OpenSSL through 1.0.2h incorrectly uses pointer     arithmetic for heap-buffer boundary checks, which might     allow remote attackers to cause a denial of service     (integer overflow and application crash) or possibly     have unspecified other impact by leveraging unexpected     malloc behavior, related to s3_srvr.c, ssl_sess.c, and     t1_lib.c.(CVE-2016-2177)

  - The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in     OpenSSL through 1.0.2h does not properly ensure the use     of constant-time operations, which makes it easier for     local users to discover a DSA private key via a timing     side-channel attack.(CVE-2016-2178)

  - The DTLS implementation in OpenSSL before 1.1.0 does     not properly restrict the lifetime of queue entries     associated with unused out-of-order messages, which     allows remote attackers to cause a denial of service     (memory consumption) by maintaining many crafted DTLS     sessions simultaneously, related to d1_lib.c,     statem_dtls.c, statem_lib.c, and     statem_srvr.c.(CVE-2016-2179)

  - The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in     the X.509 Public Key Infrastructure Time-Stamp Protocol     (TSP) implementation in OpenSSL through 1.0.2h allows     remote attackers to cause a denial of service     (out-of-bounds read and application crash) via a     crafted time-stamp file that is mishandled by the     'openssl ts' command.(CVE-2016-2180)

  - The Anti-Replay feature in the DTLS implementation in     OpenSSL before 1.1.0 mishandles early use of a new     epoch number in conjunction with a large sequence     number, which allows remote attackers to cause a denial     of service (false-positive packet drops) via spoofed     DTLS records, related to rec_layer_d1.c and     ssl3_record.c.(CVE-2016-2181)

  - The BN_bn2dec function in crypto/bn/bn_print.c in     OpenSSL before 1.1.0 does not properly validate     division results, which allows remote attackers to     cause a denial of service (out-of-bounds write and     application crash) or possibly have unspecified other     impact via unknown vectors.(CVE-2016-2182)

  - The tls_decrypt_ticket function in ssl/t1_lib.c in     OpenSSL before 1.1.0 does not consider the HMAC size     during validation of the ticket length, which allows     remote attackers to cause a denial of service via a     ticket that is too short.(CVE-2016-6302)

  - Multiple memory leaks in t1_lib.c in OpenSSL before     1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a     allow remote attackers to cause a denial of service     (memory consumption) via large OCSP Status Request     extensions.(CVE-2016-6304)

  - The certificate parser in OpenSSL before 1.0.1u and     1.0.2 before 1.0.2i might allow remote attackers to     cause a denial of service (out-of-bounds read) via     crafted certificate operations, related to s3_clnt.c     and s3_srvr.c.(CVE-2016-6306)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.23 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

This release adds the new Apache HTTP Server 2.4.23 packages that are part of the JBoss Core Services offering.

This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.6, and includes bug fixes and enhancements.
Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.

Security Fix(es) :

* A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library. (CVE-2016-2108)

* It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow. (CVE-2016-6808)

* It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system. (CVE-2016-2178)

* Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2016-2177)

* It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash. (CVE-2016-4459)

* An error was found in protocol parsing logic of mod_cluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process.
(CVE-2016-8612)

Red Hat would like to thank the OpenSSL project for reporting CVE-2016-2108. The CVE-2016-4459 issue was discovered by Robert Bost (Red Hat). Upstream acknowledges Huzaifa Sidhpurwala (Red Hat), Hanno Bock, and David Benjamin (Google) as the original reporters of CVE-2016-2108.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3621 advisory.

    - fix CVE-2016-2177 - possible integer overflow
    - fix CVE-2016-2178 - non-constant time DSA operations
    - fix CVE-2016-2179 - further DoS issues in DTLS
    - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
    - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
    - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
    - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
    - fix CVE-2016-6304 - unbound memory growth with OCSP status request
    - fix CVE-2016-6306 - certificate message OOB reads
    - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to       112 bit effective strength
    - fix CVE-2016-2105 - possible overflow in base64 encoding
    - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
    - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
    - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
    - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
    - fix CVE-2016-0799 - memory issues in BIO_printf
    - fix CVE-2016-0702 - side channel attack on modular exponentiation
    - fix CVE-2016-0705 - double-free in DSA private key parsing
    - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn
    - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
    - fix CVE-2015-7575 - disallow use of MD5 in TLS1.2
    - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
    - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
    - fix CVE-2015-3196 - race condition when handling PSK identity hint
    - fix regression caused by mistake in fix for CVE-2015-1791
    - improved fix for CVE-2015-1791
    - add missing parts of CVE-2015-0209 fix for corectness although unexploitable
    - fix CVE-2014-8176 - invalid free in DTLS buffering code
    - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
    - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
    - fix CVE-2015-1791 - race condition handling NewSessionTicket
    - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function
    - fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on       read in multithreaded applications
    - fix CVE-2015-4000 - prevent the logjam attack on client - restrict       the DH key size to at least 768 bits (limit will be increased in future)
    - update fix for CVE-2015-0287 to what was released upstream
    - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
    - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
    - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
    - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
    - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
    - fix CVE-2015-0292 - integer underflow in base64 decoder
    - fix CVE-2015-0293 - triggerable assert in SSLv2 server
    - fix CVE-2014-3570 - incorrect computation in BN_sqr()
    - fix CVE-2014-3571 - possible crash in dtls1_get_record()
    - fix CVE-2014-3572 - possible downgrade of ECDH ciphersuite to non-PFS state
    - fix CVE-2014-8275 - various certificate fingerprint issues
    - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export       ciphersuites and on server
    - fix CVE-2015-0205 - do not allow unauthenticated client DH certificate
    - fix CVE-2015-0206 - possible memory leak when buffering DTLS records
    - fix CVE-2014-3567 - memory leak when handling session tickets
    - fix CVE-2014-3513 - memory leak in srtp support
    - add support for fallback SCSV to partially mitigate CVE-2014-3566       (padding attack on SSL3)
    - fix CVE-2014-3505 - doublefree in DTLS packet processing
    - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
    - fix CVE-2014-3507 - avoid memory leak in DTLS
    - fix CVE-2014-3508 - fix OID handling to avoid information leak
    - fix CVE-2014-3509 - fix race condition when parsing server hello
    - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
    - fix CVE-2014-3511 - disallow protocol downgrade via fragmentation
    - fix CVE-2014-0224 fix that broke EAP-FAST session resumption support
    - fix CVE-2010-5298 - possible use of memory after free
    - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment
    - fix CVE-2014-0198 - possible NULL pointer dereference
    - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet
    - fix CVE-2014-0224 - SSL/TLS MITM vulnerability
    - fix CVE-2014-3470 - client-side DoS when using anonymous ECDH
    - fix CVE-2014-0160 - information disclosure in TLS heartbeat extension
    - fix CVE-2013-4353 - Invalid TLS handshake crash
    - fix CVE-2013-6450 - possible MiTM attack on DTLS1
    - fix CVE-2013-6449 - crash when version in SSL structure is incorrect
    - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
    - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
    - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB       environment variable is set (fixes CVE-2012-4929 #857051)
    - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
    - properly initialize tkeylen in the CVE-2012-0884 fix
    - fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)
    - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
    - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)
    - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery       vulnerability and additional DTLS fixes (#771770)
    - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
    - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
    - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)
    - initialize the X509_STORE_CTX properly for CRL lookups - CVE-2011-3207       (#736087)
    - fix OCSP stapling vulnerability - CVE-2011-0014 (#676063)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3181-1 advisory.

    Guido Vranken discovered that OpenSSL used undefined behaviour when performing pointer arithmetic. A     remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service.
    This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS as other releases were fixed in a     previous security update. (CVE-2016-2177)

    It was discovered that OpenSSL did not properly handle Montgomery multiplication, resulting in incorrect     results leading to transient failures. This issue only applied to Ubuntu 16.04 LTS, and Ubuntu 16.10.
    (CVE-2016-7055)

    It was discovered that OpenSSL did not properly use constant-time operations when performing ECDSA P-256     signing. A remote attacker could possibly use this issue to perform a timing attack and recover private     ECDSA keys. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2016-7056)

    Shi Lei discovered that OpenSSL incorrectly handled certain warning alerts. A remote attacker could     possibly use this issue to cause OpenSSL to stop responding, resulting in a denial of service.
    (CVE-2016-8610)

    Robert wicki discovered that OpenSSL incorrectly handled certain truncated packets. A remote attacker     could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2017-3731)

    It was discovered that OpenSSL incorrectly performed the x86_64 Montgomery squaring procedure. While     unlikely, a remote attacker could possibly use this issue to recover private keys. This issue only applied     to Ubuntu 16.04 LTS, and Ubuntu 16.10. (CVE-2017-3732)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its banner, the version of OpenSSL on the remote host is 1.0.1 prior to 1.0.1u, or 1.0.2 prior to 1.0.2i.  It is therefore affected by the following vulnerabilities :

 - A flaw exists in 'ssl/s3_srvr.c', 'ssl/ssl_sess.c', and 'ssl/t1_lib.c' that may under certain circumstances lead to integer overflows and allow an attacker to have an unspecified impact. (CVE-2016-2177)
 - A flaw exists in 'crypto/dsa/dsa_ossl.c' that is triggered as the DSA signing algorithm does not properly run in constant time.  This may potentially allow a context-dependent attacker to conduct e.g. a side channel attack and gain unauthorized access to DSA key information. (CVE-2016-2178)
 - A flaw exists that is due to the system not handling fragmented DTLS buffered messages correctly.  There are two scenarios where messages could result in the queue not being cleared and memory not being freed.  The first occurs when a full message is received after a fragment of the same message, and the system uses the full message while ignoring the fragmented message without removing it from queue.  The second occurs when a peer sends a 'future' message with extraneous packets containing a sequence number higher than the Finished message, resulting in the packets not being removed from queue.  With a saturation of either type of message, a remote attacker can exhaust up to 1500k of memory per connection, exhausting memory leading to a remote denial of service. (CVE-2016-2179)
 - An out-of-bounds read flaw exists in the 'TS_OBJ_print_bio()' function in 'crypto/ts/ts_lib.c'.  This may allow a context-dependent attacker to have an unspecified impact that may potentially include crashing a process linked against the library or disclosing memory contents. (CVE-2016-2180)
 - A flaw exists in the DTLS implementation that is triggered when handling epoch sequence numbers in records.  This may allow a remote attacker to cause legitimate packets to be dropped. (CVE-2016-2181)
 - An overflow condition exists in the 'BN_bn2dec()' function in 'crypto/bn/bn_print.c'.  The issue is triggered as certain input is not properly validated when handling BIGNUM values. This may allow a context-dependent attacker to cause a buffer overflow, resulting in a denial of service in a process linked against the library. (CVE-2016-2182)
 - A flaw exists in the 'tls_decrypt_ticket()' function in 'ssl/t1_lib.c' that is triggered during the handling of ticket HMAC digest.  This may allow a remote attacker to crash the service. (CVE-2016-6302)
 - An overflow condition exists in the 'MDC2_Update()' function in 'crypto/mdc2/mdc2dgst.c' that is triggered as certain input is not properly validated.  This may allow a context-dependent attacker to cause a heap-based buffer overflow, crashing a process linked against the library or potentially allowing the execution of arbitrary code. (CVE-2016-6303)
 - A flaw exists in the 'ssl_parse_clienthello_tlsext()' function in 'ssl/t1_lib.c' that is triggered when handling overly large OCSP Status Request extensions from clients.  This may allow a remote attacker to exhaust available memory in a process linked against the library. (CVE-2016-6304)
 - An out-of-bounds read flaw exists that is triggered when handling client certificate, client certificate request, and server certificate messages.  This may allow a remote attacker to potentially crash a process linked against the library. (CVE-2016-6306)

OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap- buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	Name	Product	Family	Published	Updated	Severity
99810	EulerOS 2.0 SP1 : openssl (EulerOS-SA-2016-1047)	Nessus	Huawei Local Security Checks	5/1/2017	1/6/2021	high
96824	RHEL 6 : JBoss Core Services (RHSA-2017:0193)	Nessus	Red Hat Local Security Checks	1/27/2017	10/24/2019	critical
181069	Oracle Linux 6 / 7 : openssl (ELSA-2016-3621)	Nessus	Oracle Linux Local Security Checks	9/7/2023	11/1/2024	critical
96927	Ubuntu 14.04 LTS / 16.04 LTS : OpenSSL vulnerabilities (USN-3181-1)	Nessus	Ubuntu Local Security Checks	2/1/2017	8/27/2024	critical
9625	OpenSSL 1.0.1 < 1.0.1u / 1.0.2 < 1.0.2i Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	10/6/2016	3/6/2019	high
503063	Siemens SCALANCE X-200RNA Switch Devices Integer Overflow or Wraparound (CVE-2016-2177)	Tenable OT Security	Tenable.ot	3/13/2025	3/13/2025	critical

Detections

Analytics

Plugins Search

high

critical

critical

critical

high

critical