Security Fix(es) :

  - openssl: ROHNP - Key Extraction Side Channel in Multiple     Crypto Libraries (CVE-2018-0495)

  - openssl: Malicious server can send large prime to client     during DH(E) TLS handshake causing the client to hang     (CVE-2018-0732)

  - openssl: Handling of crafted recursive ASN.1 structures     can cause a stack overflow and resulting denial of     service (CVE-2018-0739)

  - openssl: Malformed X.509 IPAdressFamily could cause OOB     read (CVE-2017-3735)

  - openssl: RSA key generation cache timing vulnerability     in crypto/rsa/rsa_gen.c allows attackers to recover     private keys (CVE-2018-0737)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - openssl: ROHNP - Key Extraction Side Channel in     Multiple Crypto Libraries (CVE-2018-0495)

  - openssl: Malicious server can send large prime to     client during DH(E) TLS handshake causing the client to     hang (CVE-2018-0732)

  - openssl: Handling of crafted recursive ASN.1 structures     can cause a stack overflow and resulting denial of     service (CVE-2018-0739)

  - openssl: Malformed X.509 IPAdressFamily could cause OOB     read (CVE-2017-3735)

  - openssl: RSA key generation cache timing vulnerability     in crypto/rsa/rsa_gen.c allows attackers to recover     private keys (CVE-2018-0737)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several local side channel attacks and a denial of service via large Diffie-Hellman parameters were discovered in OpenSSL, a Secure Sockets Layer toolkit.

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - openssl: ROHNP - Key Extraction Side Channel in     Multiple Crypto Libraries (CVE-2018-0495)

  - openssl: Malicious server can send large prime to     client during DH(E) TLS handshake causing the client to     hang (CVE-2018-0732)

  - openssl: Malformed X.509 IPAdressFamily could cause OOB     read (CVE-2017-3735)

  - openssl: RSA key generation cache timing vulnerability     in crypto/rsa/rsa_gen.c allows attackers to recover     private keys (CVE-2018-0737)

  - openssl: Handling of crafted recursive ASN.1 structures     can cause a stack overflow and resulting denial of     service (CVE-2018-0739)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a     memory-cache side-channel attack on ECDSA signatures     that can be mitigated through the use of blinding     during the signing process in the _gcry_ecc_ecdsa_sign     function in cipher/ecc-ecdsa.c, aka the Return Of the     Hidden Number Problem or ROHNP. To discover an ECDSA     key, the attacker needs access to either the local     machine or a different virtual machine on the same     physical host.i1/4^CVE-2018-0495i1/4%0

  - During key agreement in a TLS handshake using a DH(E)     based ciphersuite a malicious server can send a very     large prime value to the client. This will cause the     client to spend an unreasonably long period of time     generating a key for this prime resulting in a hang     until the client has finished. This could be exploited     in a Denial Of Service attack. Fixed in OpenSSL     1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL     1.0.2p-dev (Affected 1.0.2-1.0.2o).i1/4^CVE-2018-0732i1/4%0

  - Constructed ASN.1 types with a recursive definition     (such as can be found in PKCS7) could eventually exceed     the stack given malicious input with excessive     recursion. This could result in a Denial Of Service     attack. There are no such structures used within     SSL/TLS that come from untrusted sources so this is     considered safe. Fixed in OpenSSL 1.1.0h (Affected     1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected     1.0.2b-1.0.2n).i1/4^CVE-2018-0739i1/4%0

  - While parsing an IPAddressFamily extension in an X.509     certificate, it is possible to do a one-byte overread.
    This would result in an incorrect text display of the     certificate. This bug has been present since 2006 and     is present in all versions of OpenSSL before 1.0.2m and     1.1.0g.i1/4^CVE-2017-3735i1/4%0

  - OpenSSL RSA key generation was found to be vulnerable     to cache side-channel attacks. An attacker with     sufficient access to mount cache timing attacks during     the RSA key generation process could recover parts of     the private key.i1/4^CVE-2018-0737i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for openssl is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es) :

* openssl: ROHNP - Key Extraction Side Channel in Multiple Crypto Libraries (CVE-2018-0495)

* openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang (CVE-2018-0732)

* openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service (CVE-2018-0739)

* openssl: Malformed X.509 IPAdressFamily could cause OOB read (CVE-2017-3735)

* openssl: RSA key generation cache timing vulnerability in crypto/rsa/ rsa_gen.c allows attackers to recover private keys (CVE-2018-0737)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.

From Red Hat Security Advisory 2018:3221 :

An update for openssl is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es) :

* openssl: ROHNP - Key Extraction Side Channel in Multiple Crypto Libraries (CVE-2018-0495)

* openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang (CVE-2018-0732)

* openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service (CVE-2018-0739)

* openssl: Malformed X.509 IPAdressFamily could cause OOB read (CVE-2017-3735)

* openssl: RSA key generation cache timing vulnerability in crypto/rsa/ rsa_gen.c allows attackers to recover private keys (CVE-2018-0737)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openssl packages installed that are affected by multiple vulnerabilities:

  - While parsing an IPAddressFamily extension in an X.509     certificate, it is possible to do a one-byte overread.
    This would result in an incorrect text display of the     certificate. This bug has been present since 2006 and is     present in all versions of OpenSSL before 1.0.2m and     1.1.0g. (CVE-2017-3735)

  - Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a     memory-cache side-channel attack on ECDSA signatures     that can be mitigated through the use of blinding during     the signing process in the _gcry_ecc_ecdsa_sign function     in cipher/ecc-ecdsa.c, aka the Return Of the Hidden     Number Problem or ROHNP. To discover an ECDSA key, the     attacker needs access to either the local machine or a     different virtual machine on the same physical host.
    (CVE-2018-0495)

  - OpenSSL RSA key generation was found to be vulnerable to     cache side-channel attacks. An attacker with sufficient     access to mount cache timing attacks during the RSA key     generation process could recover parts of the private     key. (CVE-2018-0737)

  - Constructed ASN.1 types with a recursive definition     (such as can be found in PKCS7) could eventually exceed     the stack given malicious input with excessive     recursion. This could result in a Denial Of Service     attack. There are no such structures used within SSL/TLS     that come from untrusted sources so this is considered     safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g).
    Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).
    (CVE-2018-0739)

  - A microprocessor side-channel vulnerability was found on     SMT (e.g, Hyper-Threading) architectures. An attacker     running a malicious process on the same core of the     processor as the victim process can extract certain     secret information. (CVE-2018-5407)

  - During key agreement in a TLS handshake using a DH(E)     based ciphersuite a malicious server can send a very     large prime value to the client. This will cause the     client to spend an unreasonably long period of time     generating a key for this prime resulting in a hang     until the client has finished. This could be exploited     in a Denial Of Service attack. Fixed in OpenSSL     1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL     1.0.2p-dev (Affected 1.0.2-1.0.2o). (CVE-2018-0732)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Patch for CVE-2018-0737, CVE-2018-0732, CVE-2018-0734, CVE-2019-1552, CVE-2019-1559.

https://www.openssl.org/news/vulnerabilities.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openssl fixes the following issues :

CVE-2018-0732: Reject excessively large primes in DH key generation (bsc#1097158)

CVE-2018-0734: Timing vulnerability in DSA signature generation (bsc#1113652)

CVE-2018-0737: Cache timing vulnerability in RSA Key Generation (bsc#1089039)

CVE-2018-5407: Elliptic curve scalar multiplication timing attack defenses (fixes 'PortSmash') (bsc#1113534)

CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080)

Fix One&Done side-channel attack on RSA (bsc#1104789)

Reject invalid EC point coordinates (bsc#1131291)

The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations (bsc#1117951)

Add missing error string to CVE-2016-8610 fix (bsc#1110018#c9)

blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)

Non security fixes: correct the error detection in the fips patch (bsc#1106197)

Add openssl(cli) Provide so the packages that require the openssl binary can require this instead of the new openssl meta package (bsc#1101470)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openssl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - If an application encounters a fatal protocol error and     then calls SSL_shutdown() twice (once to send a     close_notify, and once to receive one) then OpenSSL can     respond differently to the calling application if a 0     byte record is received with invalid padding compared     to if a 0 byte record is received with an invalid MAC.
    If the application then behaves differently based on     that in a way that is detectable to the remote peer,     then this amounts to a padding oracle that could be     used to decrypt data. In order for this to be     exploitable 'non-stitched' ciphersuites must be in use.
    Stitched ciphersuites are optimised implementations of     certain commonly used ciphersuites. Also the     application must call SSL_shutdown() twice even if a     protocol error has occurred (applications should not do     this but some do anyway). Fixed in OpenSSL 1.0.2r     (Affected 1.0.2-1.0.2q).(CVE-2019-1559)

  - Constructed ASN.1 types with a recursive definition     (such as can be found in PKCS7) could eventually exceed     the stack given malicious input with excessive     recursion. This could result in a Denial Of Service     attack. There are no such structures used within     SSL/TLS that come from untrusted sources so this is     considered safe. Fixed in OpenSSL 1.1.0h (Affected     1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected     1.0.2b-1.0.2n).(CVE-2018-0739)

  - OpenSSL RSA key generation was found to be vulnerable     to cache side-channel attacks. An attacker with     sufficient access to mount cache timing attacks during     the RSA key generation process could recover parts of     the private key.(CVE-2018-0737)

  - During key agreement in a TLS handshake using a DH(E)     based ciphersuite a malicious server can send a very     large prime value to the client. This will cause the     client to spend an unreasonably long period of time     generating a key for this prime resulting in a hang     until the client has finished. This could be exploited     in a Denial Of Service attack. Fixed in OpenSSL     1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL     1.0.2p-dev (Affected 1.0.2-1.0.2o).(CVE-2018-0732)

  - While parsing an IPAddressFamily extension in an X.509     certificate, it is possible to do a one-byte overread.
    This would result in an incorrect text display of the     certificate. This bug has been present since 2006 and     is present in all versions of OpenSSL before 1.0.2m and     1.1.0g.(CVE-2017-3735)

  - Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a     memory-cache side-channel attack on ECDSA signatures     that can be mitigated through the use of blinding     during the signing process in the _gcry_ecc_ecdsa_sign     function in cipher/ecc-ecdsa.c, aka the Return Of the     Hidden Number Problem or ROHNP. To discover an ECDSA     key, the attacker needs access to either the local     machine or a different virtual machine on the same     physical host.(CVE-2018-0495)

  - A flaw was found in the way SSL 3.0 handled padding     bytes when decrypting messages encrypted using block     ciphers in cipher block chaining (CBC) mode. This flaw     allows a man-in-the-middle (MITM) attacker to decrypt a     selected byte of a cipher text in as few as 256 tries     if they are able to force a victim application to     repeatedly send the same data over newly created SSL     3.0 connections.(CVE-2014-3566)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version, the Tenable SecurityCenter application installed on the remote host is prior to 5.7.1. It is, therefore, affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

This release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering.

This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.29 and includes bug fixes and enhancements.
Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.

Security Fix(es) :

* openssl: RSA key generation cache timing vulnerability in crypto/rsa/ rsa_gen.c allows attackers to recover private keys (CVE-2018-0737) * openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734) * mod_auth_digest: access control bypass due to race condition (CVE-2019-0217) * openssl: Side-channel vulnerability on SMT/ Hyper-Threading architectures (PortSmash) (CVE-2018-5407) * mod_session_cookie does not respect expiry time (CVE-2018-17199) * mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189) * mod_http2: possible crash on late upgrade (CVE-2019-0197) * mod_http2: read-after-free on a string compare (CVE-2019-0196) * nghttp2: HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511) * nghttp2: HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513) * mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516) * mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

An update is now available for JBoss Core Services on RHEL 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

This release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering.

This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.29 and includes bug fixes and enhancements.
Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.

Security Fix(es) :

* openssl: RSA key generation cache timing vulnerability in crypto/rsa/ rsa_gen.c allows attackers to recover private keys (CVE-2018-0737)

* openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734)

* mod_auth_digest: access control bypass due to race condition (CVE-2019-0217)

* openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407)

* mod_session_cookie does not respect expiry time (CVE-2018-17199)

* mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189)

* mod_http2: possible crash on late upgrade (CVE-2019-0197)

* mod_http2: read-after-free on a string compare (CVE-2019-0196)

* nghttp2: HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)

* nghttp2: HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)

* mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)

* mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component:

  - An unspecified vulnerability in the subcomponent Networking     (jQuery) of Enterprise Manager Ops Center. Supported versions     that are affected are 12.2.2 and 12.3.3. An easy to exploit     vulnerability could allow an unauthenticated attacker with     network access via HTTP to compromise Enterprise Manager Ops     Center. A successful attacks requires human interaction and     can result in unauthorized update, insert or delete access     to some of Enterprise Manager Ops Center accessible data.
    (CVE-2015-9251)

  - An unspecified vulnerability in the subcomponent Networking     (OpenSSL) of the Enterprise Manager Ops Center. Supported     versions that are affected are 12.2.2 and 12.3.3. An easy     to exploit vulnerability could allow an unauthenticated     attacker with network access via HTTPS to compromise     Enterprise Manager Ops Center. A successful attack of this     vulnerability could result in unauthorized ability to cause     a hang or frequently repeatable crash (complete DOS) of     Enterprise Manager Ops Center. (CVE-2018-0732)

  - An unspecified vulnerability in the subcomponent Networking     (cURL) of Enterprise Manager Ops Center. Supported versions     that are affected are 12.2.2 and 12.3.3. Difficult to exploit     vulnerability allows unauthenticated attacker with network     access via HTTP to compromise Enterprise Manager Ops Center.
    A successful attack requires human interaction from a person     other than the attacker and can result in takeover of     Enterprise Manager Ops Center. (CVE-2018-1000300)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a     memory-cache side-channel attack on ECDSA signatures     that can be mitigated through the use of blinding     during the signing process in the _gcry_ecc_ecdsa_sign     function in cipher/ecc-ecdsa.c, aka the Return Of the     Hidden Number Problem or ROHNP. To discover an ECDSA     key, the attacker needs access to either the local     machine or a different virtual machine on the same     physical host.(CVE-2018-0495)

  - OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1     before 1.0.1d does not properly perform signature     verification for OCSP responses, which allows remote     OCSP servers to cause a denial of service (NULL pointer     dereference and application crash) via an invalid     key.(CVE-2013-0166)

  - OpenSSL 1.0.2 (starting from version 1.0.2b) introduced     an 'error state' mechanism. The intent was that if a     fatal error occurred during a handshake then OpenSSL     would move into the error state and would immediately     fail if you attempted to continue the handshake. This     works as designed for the explicit handshake functions     (SSL_do_handshake(), SSL_accept() and SSL_connect()),     however due to a bug it does not work correctly if     SSL_read() or SSL_write() is called directly. In that     scenario, if the handshake fails then a fatal error     will be returned in the initial function call. If     SSL_read()/SSL_write() is subsequently called by the     application for the same SSL object then it will     succeed and the data is passed without being     decrypted/encrypted directly from the SSL/TLS record     layer. In order to exploit this issue an application     bug would have to be present that resulted in a call to     SSL_read()/SSL_write() being issued after having     already received a fatal error. OpenSSL version     1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n.
    OpenSSL 1.1.0 is not affected.(CVE-2017-3737)

  - An out-of-bounds write flaw was found in the way     OpenSSL reused certain ASN.1 structures. A remote     attacker could possibly use a specially crafted ASN.1     structure that, when parsed by an application, would     cause that application to crash.(CVE-2015-0287)

  - It was found that OpenSSL clients and servers could be     forced, via a specially crafted handshake packet, to     use weak keying material for communication. A     man-in-the-middle attacker could use this flaw to     decrypt and modify traffic between a client and a     server.(CVE-2014-0224)

  - There is an overflow bug in the AVX2 Montgomery     multiplication procedure used in exponentiation with     1024-bit moduli. No EC algorithms are affected.
    Analysis suggests that attacks against RSA and DSA as a     result of this defect would be very difficult to     perform and are not believed likely. Attacks against     DH1024 are considered just feasible, because most of     the work necessary to deduce information about a     private key may be performed offline. The amount of     resources required for such an attack would be     significant. However, for an attack on TLS to be     meaningful, the server would have to share the DH1024     private key among multiple clients, which is no longer     an option since CVE-2016-0701. This only affects     processors that support the AVX2 but not ADX extensions     like Intel Haswell (4th generation). Note: The impact     from this issue is similar to CVE-2017-3736,     CVE-2017-3732 and CVE-2015-3193. OpenSSL version     1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in     OpenSSL 1.0.2n. Due to the low severity of this issue     we are not issuing a new release of OpenSSL 1.1.0 at     this time. The fix will be included in OpenSSL 1.1.0h     when it becomes available. The fix is also available in     commit e502cc86d in the OpenSSL git     repository.(CVE-2017-3738)

  - The ssl3_send_client_key_exchange function in s3_clnt.c     in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and     1.0.1 before 1.0.1h, when an anonymous ECDH cipher     suite is used, allows remote attackers to cause a     denial of service (NULL pointer dereference and client     crash) by triggering a NULL certificate     value.(CVE-2014-3470)

  - It was discovered that the SSLv2 protocol     implementation in OpenSSL did not properly implement     the Bleichenbacher protection for export cipher suites.
    An attacker could use a SSLv2 server using OpenSSL as a     Bleichenbacher oracle.(CVE-2016-0704)

  - A NULL pointer dereference flaw was found in the way     OpenSSL performed a handshake when using the anonymous     Diffie-Hellman (DH) key exchange. A malicious server     could cause a DTLS client using OpenSSL to crash if     that client had anonymous DH cipher suites     enabled.(CVE-2014-3510)

  - While parsing an IPAddressFamily extension in an X.509     certificate, it is possible to do a one-byte overread.
    This would result in an incorrect text display of the     certificate. This bug has been present since 2006 and     is present in all versions of OpenSSL before 1.0.2m and     1.1.0g.(CVE-2017-3735)

  - The Network Security Services (NSS) library before     3.12.3, as used in Firefox GnuTLS before 2.6.4 and     2.7.4 OpenSSL 0.9.8 through 0.9.8k and other products     support MD2 with X.509 certificates, which might allow     remote attackers to spoof certificates by using MD2     design flaws to generate a hash collision in less than     brute-force time. NOTE: the scope of this issue is     currently limited because the amount of computation     required is still large.(CVE-2009-2409)

  - Constructed ASN.1 types with a recursive definition     (such as can be found in PKCS7) could eventually exceed     the stack given malicious input with excessive     recursion. This could result in a Denial Of Service     attack. There are no such structures used within     SSL/TLS that come from untrusted sources so this is     considered safe. Fixed in OpenSSL 1.1.0h (Affected     1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected     1.0.2b-1.0.2n).(CVE-2018-0739)

  - During key agreement in a TLS handshake using a DH(E)     based ciphersuite a malicious server can send a very     large prime value to the client. This will cause the     client to spend an unreasonably long period of time     generating a key for this prime resulting in a hang     until the client has finished. This could be exploited     in a Denial Of Service attack. Fixed in OpenSSL     1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL     1.0.2p-dev (Affected 1.0.2-1.0.2o).(CVE-2018-0732)

  - A NULL pointer dereference was found in the way OpenSSL     handled certain PKCS#7 inputs. An attacker able to make     an application using OpenSSL verify, decrypt, or parse     a specially crafted PKCS#7 input could cause that     application to crash. TLS/SSL clients and servers using     OpenSSL were not affected by this flaw.(CVE-2015-0289)

  - A flaw was discovered in the way OpenSSL handled DTLS     packets. A remote attacker could use this flaw to cause     a DTLS server or client using OpenSSL to crash or use     excessive amounts of memory.(CVE-2014-3506)

  - The kssl_keytab_is_available function in ssl/kssl.c in     OpenSSL before 0.9.8n, when Kerberos is enabled but     Kerberos configuration files cannot be opened, does not     check a certain return value, which allows remote     attackers to cause a denial of service (NULL pointer     dereference and daemon crash) via SSL cipher     negotiation, as demonstrated by a chroot installation     of Dovecot or stunnel without Kerberos configuration     files inside the chroot.(CVE-2010-0433)

  - It was discovered that OpenSSL would accept ephemeral     RSA keys when using non-export RSA cipher suites. A     malicious server could make a TLS/SSL client using     OpenSSL use a weaker key exchange     method.(CVE-2015-0204)

  - It was found that OpenSSL's BigNumber Squaring     implementation could produce incorrect results under     certain special conditions. This flaw could possibly     affect certain OpenSSL library functionality, such as     RSA blinding. Note that this issue occurred rarely and     with a low probability, and there is currently no known     way of exploiting it.(CVE-2014-3570)

  - It was discovered that the OBJ_obj2txt() function could     fail to properly NUL-terminate its output. This could     possibly cause an application using OpenSSL functions     to format fields of X.509 certificates to disclose     portions of its memory.(CVE-2014-3508)

  - OpenSSL RSA key generation was found to be vulnerable     to cache side-channel attacks. An attacker with     sufficient access to mount cache timing attacks during     the RSA key generation process could recover parts of     the private key.(CVE-2018-0737)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
119194	Scientific Linux Security Update : openssl on SL7.x x86_64 (20181030)	Nessus	Scientific Linux Local Security Checks	2018/11/27	2020/07/01	medium
120997	EulerOS 2.0 SP5 : openssl (EulerOS-SA-2019-1009)	Nessus	Huawei Local Security Checks	2019/01/08	2020/11/13	medium
119313	Debian DSA-4348-1 : openssl - security update	Nessus	Debian Local Security Checks	2018/12/01	2020/06/18	medium
119909	EulerOS 2.0 SP2 : openssl (EulerOS-SA-2018-1420)	Nessus	Huawei Local Security Checks	2018/12/28	2020/11/13	medium
123887	EulerOS Virtualization 2.5.4 : openssl (EulerOS-SA-2019-1201)	Nessus	Huawei Local Security Checks	2019/04/09	2020/11/13	medium
118998	CentOS 7 : openssl (CESA-2018:3221)	Nessus	CentOS Local Security Checks	2018/11/16	2019/12/31	medium
118777	Oracle Linux 7 : openssl (ELSA-2018-3221)	Nessus	Oracle Linux Local Security Checks	2018/11/07	2019/09/27	medium
127262	NewStart CGSL CORE 5.04 / MAIN 5.04 : openssl Multiple Vulnerabilities (NS-SA-2019-0065)	Nessus	NewStart CGSL Local Security Checks	2019/08/12	2020/11/13	medium
129319	Fedora 30 : 1:compat-openssl10 (2019-00c25b9379)	Nessus	Fedora Local Security Checks	2019/09/25	2019/12/24	medium
129653	Fedora 31 : 1:compat-openssl10 (2019-db06efdea1)	Nessus	Fedora Local Security Checks	2019/10/07	2019/12/19	medium
126046	SUSE SLES12 Security Update : openssl (SUSE-SU-2019:1553-1)	Nessus	SuSE Local Security Checks	2019/06/19	2020/01/10	medium
129368	Fedora 29 : 1:compat-openssl10 (2019-9a0a7c0986)	Nessus	Fedora Local Security Checks	2019/09/26	2019/12/23	medium
124903	EulerOS Virtualization for ARM 64 3.0.1.0 : openssl (EulerOS-SA-2019-1400)	Nessus	Huawei Local Security Checks	2019/05/14	2020/11/13	medium
117672	Tenable SecurityCenter < 5.7.1 Multiple Vulnerabilities (TNS-2018-12)	Nessus	Misc.	2018/09/24	2020/10/09	high
131215	RHEL 6 : JBoss Core Services (RHSA-2019:3932) (0-Length Headers Leak) (Data Dribble) (Internal Data Buffering) (Resource Loop)	Nessus	Red Hat Local Security Checks	2019/11/22	2019/12/09	medium
131216	RHEL 7 : JBoss Core Services (RHSA-2019:3933) (0-Length Headers Leak) (Data Dribble) (Internal Data Buffering) (Resource Loop)	Nessus	Red Hat Local Security Checks	2019/11/22	2019/12/09	medium
131184	Oracle Enterprise Manager Ops Center (Jan 2019 CPU)	Nessus	Misc.	2019/11/21	2019/11/22	high
124999	EulerOS Virtualization 3.0.1.0 : openssl (EulerOS-SA-2019-1546)	Nessus	Huawei Local Security Checks	2019/05/14	2020/11/13	medium

Plugins Search