Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, as well as a full-strength, general purpose cryptography library.

It was discovered that the Datagram Transport Layer Security (DTLS) protocol implementation in OpenSSL leaked timing information when performing certain operations. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a DTLS server as a padding oracle. (CVE-2011-4108)

An information leak flaw was found in the SSL 3.0 protocol implementation in OpenSSL. Incorrect initialization of SSL record padding bytes could cause an SSL client or server to send a limited amount of possibly sensitive data to its SSL peer via the encrypted connection. (CVE-2011-4576)

A denial of service flaw was found in the RFC 3779 implementation in OpenSSL. A remote attacker could use this flaw to make an application using OpenSSL exit unexpectedly by providing a specially crafted X.509 certificate that has malformed RFC 3779 extension data.
(CVE-2011-4577)

It was discovered that OpenSSL did not limit the number of TLS/SSL handshake restarts required to support Server Gated Cryptography. A remote attacker could use this flaw to make a TLS/SSL server using OpenSSL consume an excessive amount of CPU by continuously restarting the handshake. (CVE-2011-4619)

All OpenSSL users should upgrade to these updated packages, which contain backported patches to resolve these issues. For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.

openssl was prone to several security issues :

  - DTLS Plaintext Recovery Attack (CVE-2011-4108)

  - Uninitialized SSL 3.0 Padding (CVE-2011-4576)

  - Malformed RFC 3779 Data Can Cause Assertion Failures     (CVE-2011-4577)

  - SGC Restart DoS Attack (CVE-2011-4619)

  - Invalid GOST parameters DoS Attack (CVE-2012-0027)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-76:02 advisory.

    The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a     certificate management tool and shared libraries which provide various cryptographic algorithms and     protocols.
    Security issues fixed with this release:
    CVE-2011-4108     The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if     certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding     oracle attack.
    CVE-2011-4576     The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize     data structures for block cipher padding, which might allow remote attackers to obtain sensitive     information by decrypting the padding data sent by an SSL peer.
    CVE-2011-4577     OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to     cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension     data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
    CVE-2011-4619     The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not     properly handle handshake restarts, which allows remote attackers to cause a denial of service via     unspecified vectors.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of OpenSSL installed on the remote host is prior to 0.9.8s. It is, therefore, affected by multiple vulnerabilities as referenced in the 0.9.8s advisory.

  - The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1     before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve     is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service     (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against     a server that supports client authentication. (CVE-2015-1788)

  - The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not     properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU     consumption) via unspecified vectors. (CVE-2011-4619)

  - OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to     cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension     data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers. (CVE-2011-4577)

  - The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize     data structures for block cipher padding, which might allow remote attackers to obtain sensitive     information by decrypting the padding data sent by an SSL peer. (CVE-2011-4576)

  - Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows     remote attackers to have an unspecified impact by triggering failure of a policy check. (CVE-2011-4109)

  - The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if     certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding     oracle attack. (CVE-2011-4108)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The OpenSSL Team reports :

6 security flaws have been fixed in OpenSSL 1.0.0f :

If X509_V_FLAG_POLICY_CHECK is set in OpenSSL 0.9.8, then a policy check failure can lead to a double-free.

OpenSSL prior to 1.0.0f and 0.9.8s failed to clear the bytes used as block cipher padding in SSL 3.0 records. As a result, in each record, up to 15 bytes of uninitialized memory may be sent, encrypted, to the SSL peer. This could include sensitive contents of previously freed memory.

RFC 3779 data can be included in certificates, and if it is malformed, may trigger an assertion failure. This could be used in a denial-of-service attack.

Support for handshake restarts for server gated cryptograpy (SGC) can be used in a denial-of-service attack.

A malicious TLS client can send an invalid set of GOST parameters which will cause the server to crash due to lack of error checking.
This could be used in a denial-of-service attack.

a. vCenter and ESX update to JRE 1.6.0 Update 31

   The Oracle (Sun) JRE is updated to version 1.6.0_31, which    addresses multiple security issues. Oracle has documented the    CVE identifiers that are addressed by this update in the Oracle    Java SE Critical Patch Update Advisory of February 2012.

b. vCenter Update Manager update to JRE 1.5.0 Update 36

   The Oracle (Sun) JRE is updated to 1.5.0_36 to address multiple    security issues.  Oracle has documented the CVE identifiers that    are addressed in JRE 1.5.0_36 in the Oracle Java SE Critical    Patch Update Advisory for June 2012.

c. Update to ESX/ESXi userworld OpenSSL library

   The ESX/ESXi userworld OpenSSL library is updated from version    0.9.8p to version 0.9.8t to resolve multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-4180, CVE-2010-4252,    CVE-2011-0014, CVE-2011-4108, CVE-2011-4109, CVE-2011-4576,    CVE-2011-4577, CVE-2011-4619, and CVE-2012-0050 to these issues.

d. Update to ESX service console OpenSSL RPM

   The service console OpenSSL RPM is updated to version    0.9.8e-22.el5_8.3 to resolve a security issue.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2012-2110 to this issue.

e. Update to ESX service console kernel

   The ESX service console kernel is updated to resolve multiple    security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2011-1833, CVE-2011-2484,    CVE-2011-2496, CVE-2011-3188, CVE-2011-3209, CVE-2011-3363,    CVE-2011-4110, CVE-2011-1020, CVE-2011-4132, CVE-2011-4324,    CVE-2011-4325, CVE-2012-0207, CVE-2011-2699, and CVE-2012-1583    to these issues.

f. Update to ESX service console Perl RPM

   The ESX service console Perl RPM is updated to    perl-5.8.8.32.1.8999.vmw to resolve multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-2761, CVE-2010-4410, and    CVE-2011-3597 to these issues.

g. Update to ESX service console libxml2 RPMs

   The ESX service console libmxl2 RPMs are updated to    libxml2-2.6.26-2.1.15.el5_8.2 and    libxml2-python-2.6.26-2.1.15.el5_8.2 to resolve a security    issue.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2012-0841 to this issue.

h. Update to ESX service console glibc RPM

   The ESX service console glibc RPM is updated to version    glibc-2.5-81.el5_8.1 to resolve multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)   has assigned the names CVE-2009-5029, CVE-2009-5064,    CVE-2010-0830, CVE-2011-1089, CVE-2011-4609, and CVE-2012-0864    to these issue.

i. Update to ESX service console GnuTLS RPM

   The ESX service console GnuTLS RPM is updated to version    1.4.1-7.el5_8.2 to resolve multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2011-4128, CVE-2012-1569, and    CVE-2012-1573 to these issues.

j. Update to ESX service console popt, rpm, rpm-libs,    and rpm-python RPMS

   The ESX service console popt, rpm, rpm-libs, and rpm-python RPMS    are updated to the following versions to resolve multiple    security issues :
      - popt-1.10.2.3-28.el5_8
      - rpm-4.4.2.3-28.el5_8
      - rpm-libs-4.4.2.3-28.el5_8
      - rpm-python-4.4.2.3-28.el5_8

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2012-0060, CVE-2012-0061, and    CVE-2012-0815 to these issues.

k. Vulnerability in third-party Apache Struts component

   The version of Apache Struts in vCenter Operations has been    updated to 2.3.4 which addresses an arbitrary file overwrite    vulnerability. This vulnerability allows an attacker to create    a denial of service by overwriting arbitrary files without    authentication. The attacker would need to be on the same network    as the system where vCOps is installed.

   The Common Vulnerabilities and Exposures project (cve.mitre.org) has    assigned the name CVE-2012-0393 to this issue.

   Note: Apache struts 2.3.4 addresses the following issues as well :
   CVE-2011-5057, CVE-2012-0391, CVE-2012-0392, CVE-2012-0394. It    was found that these do not affect vCOps.

   VMware would like to thank Alexander Minozhenko from ERPScan for    reporting this issue to us.

The remote host is running a version of Mac OS X 10.8.x that is prior to 10.8.4. The newer version contains multiple security-related fixes for the following components :

  - CFNetwork
  - CoreAnimation
  - CoreMedia Playback
  - CUPS
  - Disk Management
  - OpenSSL
  - QuickDraw Manager
  - QuickTime
  - SMB

The remote host is running a version of Mac OS X 10.6 or 10.7 that does not have Security Update 2013-002 applied.  This update contains numerous security-related fixes for the following components :

  - CoreMedia Playback (10.7 only)
  - Directory Service (10.6 only)
  - OpenSSL
  - QuickDraw Manager
  - QuickTime
  - Ruby (10.6 only)
  - SMB (10.7 only)

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party libraries :

  - Apache Struts
  - glibc
  - GnuTLS
  - JRE
  - kernel
  - libxml2
  - OpenSSL
  - Perl
  - popt and rpm

openssl was updated to 1.0.0k security release to fix bugs and security issues. (bnc#802648 bnc#802746) The version was upgraded to avoid backporting the large fixes for SSL, TLS and DTLS Plaintext Recovery Attack (CVE-2013-0169) TLS 1.1 and 1.2 AES-NI crash (CVE-2012-2686) OCSP invalid key DoS issue (CVE-2013-0166)

Also the following bugfix was included: bnc#757773 - c_rehash to accept more filename extensions

Various security vulnerabilities have been fixed in OpenSSL :

  - DTLS plaintext recovery attack. (CVE-2011-4108)

  - double-free in Policy Checks. (CVE-2011-4109)

  - uninitialized SSL 3.0 padding. (CVE-2011-4576)

  - malformed RFC 3779 data can cause assertion failures.
    (CVE-2011-4577)

  - SGC restart DoS attack (CVE-2011-4619)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0059 advisory.

    - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery       vulnerability and additional DTLS fixes (#771770)
    - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
    - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote VMware ESXi 5.0 host is affected by Multiple Vulnerabilities :

  - An integer overflow condition exists in the
    __tzfile_read() function in the glibc library. An     unauthenticated, remote attacker can exploit this, via     a crafted timezone (TZ) file, to cause a denial of     service or the execution of arbitrary code.
    (CVE-2009-5029)

  - ldd in the glibc library is affected by a privilege     escalation vulnerability due to the omission of certain     LD_TRACE_LOADED_OBJECTS checks in a crafted executable     file. Note that this vulnerability is disputed by the     library vendor. (CVE-2009-5064)

  - A remote code execution vulnerability exists in the     glibc library due to an integer signedness error in the     elf_get_dynamic_info() function when the '--verify'     option is used. A remote attacker can exploit this by     using a crafted ELF program with a negative value for a     certain d_tag structure member in the ELF header.
    (CVE-2010-0830)

  - A flaw exists in OpenSSL due to a failure to properly     prevent modification of the ciphersuite in the session     cache when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is     enabled. A remote attacker can exploit this to force a     downgrade to an unintended cipher by intercepting the     network traffic to discover a session identifier.
    (CVE-2010-4180)

  - A flaw exists in OpenSSL due to a failure to properly     validate the public parameters in the J-PAKE protocol     when J-PAKE is enabled. A remote attacker can exploit     this, by sending crafted values in each round of the     protocol, to bypass the need for knowledge of the shared     secret. (CVE-2010-4252)

  - A out-of-bounds memory error exists in OpenSSL that     allows a remote attacker to cause a denial of service or     possibly obtain sensitive information by using a     malformed ClientHello handshake message. This is also     known as the 'OCSP stapling vulnerability'.
    (CVE-2011-0014)

  - A flaw exists in the addmntent() function in the glibc     library due to a failure to report the error status for     failed attempts to write to the /etc/mtab file. A local     attacker can exploit this to corrupt the file by using     writes from a process with a small RLIMIT_FSIZE value.
    (CVE-2011-1089)

  - A flaw exists in the png_set_text_2() function in the     file pngset.c in the libpng library due to a failure to     properly allocate memory. An unauthenticated, remote     attacker can exploit this, via a crafted text chunk in a     PNG image file, to trigger a heap-based buffer overflow,     resulting in denial of service or the execution of     arbitrary code. (CVE-2011-3048)

  - A flaw exists in the DTLS implementation in OpenSSL due     to performing a MAC check only if certain padding is     valid. A remote attacker can exploit this, via a padding     oracle attack, to recover the plaintext. (CVE-2011-4108)

  - A double-free error exists in OpenSSL when the     X509_V_FLAG_POLICY_CHECK is enabled. A remote attacker     can exploit this by triggering a policy check failure,     resulting in an unspecified impact. (CVE-2011-4109)

  - A flaw exists in OpenSSL in the SSL 3.0 implementation     due to improper initialization of data structures used     for block cipher padding. A remote attacker can exploit     this, by decrypting the padding data sent by an SSL     peer, to obtain sensitive information. (CVE-2011-4576)

  - A denial of service vulnerability exists in OpenSSL when     RFC 3779 support is enabled. A remote attacker can     exploit this to cause an assertion failure, by using an     X.509 certificate containing certificate extension data     associated with IP address blocks or Autonomous System     (AS) identifiers. (CVE-2011-4577)

  - A denial of service vulnerability exists in the RPC     implementation in the glibc library due to a flaw in the     svc_run() function. A remote attacker can exploit this,     via large number of RPC connections, to exhaust CPU     resources. (CVE-2011-4609)

  - A denial of service vulnerability exists in the Server     Gated Cryptography (SGC) implementation in OpenSSL due     to a failure to properly handle handshake restarts. A     remote attacker can exploit this, via unspecified     vectors, to exhaust CPU resources. (CVE-2011-4619)

  - A denial of service vulnerability exists in OpenSSL due     to improper support of DTLS applications. A remote     attacker can exploit this, via unspecified vectors     related to an out-of-bounds read error. Note that this     vulnerability exists because of an incorrect fix for     CVE-2011-4108. (CVE-2012-0050)

  - A security bypass vulnerability exists in the glibc     library due to an integer overflow condition in the     vfprintf() function in file stdio-common/vfprintf.c. An     attacker can exploit this, by using a large number of     arguments, to bypass the FORTIFY_SOURCE protection     mechanism, allowing format string attacks or writing to     arbitrary memory. (CVE-2012-0864)

  - A denial of service vulnerability exists in the glibc     library in the vfprintf() function in file     stdio-common/vfprintf.c due to a failure to properly     calculate a buffer length. An attacker can exploit this,     via a format string that uses positional parameters and     many format specifiers, to bypass the FORTIFY_SOURCE     format-string protection mechanism, thus causing stack     corruption and a crash. (CVE-2012-3404)

  - A denial of service vulnerability exists in the glibc     library in the vfprintf() function in file     stdio-common/vfprintf.c due to a failure to properly     calculate a buffer length. An attacker can exploit this,     via a format string with a large number of format     specifiers, to bypass the FORTIFY_SOURCE format-string     protection mechanism, thus triggering desynchronization     within the buffer size handling, resulting in a     segmentation fault and crash. (CVE-2012-3405)

  - A flaw exists in the glibc library in the vfprintf()     function in file stdio-common/vfprintf.c due to a     failure to properly restrict the use of the alloca()     function when allocating the SPECS array. An attacker     can exploit this, via a crafted format string using     positional parameters and a large number of format     specifiers, to bypass the FORTIFY_SOURCE format-string     protection mechanism, thus triggering a denial of     service or the possible execution of arbitrary code.
    (CVE-2012-3406)

  - A flaw exists in the glibc library due to multiple     integer overflow conditions in the strtod(), strtof(),     strtold(), strtod_l(), and other unspecified related     functions. A local attacker can exploit these to trigger     a stack-based buffer overflow, resulting in an     application crash or the possible execution of arbitrary     code. (CVE-2012-3480)

  - A privilege escalation vulnerability exists in the     Virtual Machine Communication Interface (VMCI) due to a     failure by control code to properly restrict memory     allocation. A local attacker can exploit this, via     unspecified vectors, to gain privileges. (CVE-2013-1406)

  - An error exists in the implementation of the Network     File Copy (NFC) protocol. A man-in-the-middle attacker     can exploit this, by modifying the client-server data     stream, to cause a denial of service or the execution     of arbitrary code. (CVE-2013-1659)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0109 advisory.

    The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization     Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor     is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes     everything necessary to run and manage virtual machines: A subset of the     Red Hat Enterprise Linux operating environment and the Red Hat Enterprise     Virtualization Agent.

    Note: Red Hat Enterprise Virtualization Hypervisor is only available for     the Intel 64 and AMD64 architectures with virtualization extensions.

    A heap overflow flaw was found in the way QEMU-KVM emulated the e1000     network interface card. A privileged guest user in a virtual machine whose     network interface is configured to use the e1000 emulated driver could use     this flaw to crash the host or, possibly, escalate their privileges on the     host. (CVE-2012-0029)

    An information leak flaw was found in the SSL 3.0 protocol implementation     in OpenSSL. Incorrect initialization of SSL record padding bytes could     cause an SSL client or server to send a limited amount of possibly     sensitive data to its SSL peer via the encrypted connection.
    (CVE-2011-4576)

    A denial of service flaw was found in the RFC 3779 implementation in     OpenSSL. A remote attacker could use this flaw to make an application using     OpenSSL exit unexpectedly by providing a specially-crafted X.509     certificate that has malformed RFC 3779 extension data. (CVE-2011-4577)

    It was discovered that OpenSSL did not limit the number of TLS/SSL     handshake restarts required to support Server Gated Cryptography. A remote     attacker could use this flaw to make a TLS/SSL server using OpenSSL consume     an excessive amount of CPU by continuously restarting the handshake.
    (CVE-2011-4619)

    Red Hat would like to thank Nicolae Mogoreanu for reporting CVE-2012-0029.

    This updated package provides updated components that include fixes for     various security issues. These issues have no security impact on Red Hat     Enterprise Virtualization Hypervisor itself, however. The security fixes     included in this update address the following CVE numbers:

    CVE-2009-5029 and CVE-2011-4609 (glibc issues)

    CVE-2012-0056 (kernel issue)

    CVE-2011-4108 and CVE-2012-0050 (openssl issues)

    This update also fixes the following bugs:

    * Previously, it was possible to begin a Hypervisor installation without     any valid disks to install to.

    Now, if no valid disks are found for Hypervisor installation, a message is     displayed informing the user that there are no valid disks for     installation. (BZ#781471)

    * Previously, the user interface for the Hypervisor did not indicate     whether the system was registered with Red Hat Network (RHN) Classic or RHN     Satellite. As a result, customers could not easily determine the     registration status of their Hypervisor installations.

    The TUI has been updated to display the registration status of the     Hypervisor. (BZ#788223)

    * Previously, autoinstall would fail if the firstboot or reinstall options     were passed but local_boot or upgrade were not passed. Now, neither the     local_boot or upgrade parameters are required for autoinstall. (BZ#788225)

    Users of the Red Hat Enterprise Virtualization Hypervisor are advised to     upgrade to this updated package, which fixes these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the openssl098e package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The DTLS implementation in OpenSSL before 1.1.0 does     not properly restrict the lifetime of queue entries     associated with unused out-of-order messages, which     allows remote attackers to cause a denial of service     (memory consumption) by maintaining many crafted DTLS     sessions simultaneously, related to d1_lib.c,     statem_dtls.c, statem_lib.c, and     statem_srvr.c.(CVE-2016-2179)

  - OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC     3779 support is enabled, allows remote attackers to     cause a denial of service (assertion failure) via an     X.509 certificate containing certificate-extension data     associated with (1) IP address blocks or (2) Autonomous     System (AS) identifiers.(CVE-2011-4577)

  - Memory leak in the dtls1_buffer_record function in     d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1     before 1.0.1k allows remote attackers to cause a denial     of service (memory consumption) by sending many     duplicate records for the next epoch, leading to     failure of replay detection.(CVE-2015-0206)

  - The ephemeral ECDH ciphersuite functionality in OpenSSL     0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not     ensure thread safety during processing of handshake     messages from clients, which allows remote attackers to     cause a denial of service (daemon crash) via     out-of-order messages that violate the TLS     protocol.(CVE-2011-3210)

  - The X509_NAME_oneline function in     crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and     1.0.2 before 1.0.2h allows remote attackers to obtain     sensitive information from process stack memory or     cause a denial of service (buffer over-read) via     crafted EBCDIC ASN.1 data.(CVE-2016-2176)

  - The ssl3_get_cert_verify function in s3_srvr.c in     OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k     accepts client authentication with a Diffie-Hellman     (DH) certificate without requiring a CertificateVerify     message, which allows remote attackers to obtain access     without knowledge of a private key via crafted TLS     Handshake Protocol traffic to a server that recognizes     a Certification Authority with DH     support.(CVE-2015-0205)

  - The ssl3_get_key_exchange function in s3_clnt.c in     OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1     before 1.0.1k allows remote SSL servers to conduct     ECDHE-to-ECDH downgrade attacks and trigger a loss of     forward secrecy by omitting the ServerKeyExchange     message.(CVE-2014-3572)

  - Memory leak in d1_both.c in the DTLS implementation in     OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and     1.0.1 before 1.0.1i allows remote attackers to cause a     denial of service (memory consumption) via zero-length     DTLS fragments that trigger improper handling of the     return value of a certain insert     function.(CVE-2014-3507)

  - The ssl23_get_client_hello function in s23_srvr.c in     OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle     attackers to force the use of TLS 1.0 by triggering     ClientHello message fragmentation in communication     between a client and server that both support later TLS     versions, related to a 'protocol downgrade'     issue.(CVE-2014-3511)

  - The ssl3_send_client_key_exchange function in s3_clnt.c     in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and     1.0.1 before 1.0.1h, when an anonymous ECDH cipher     suite is used, allows remote attackers to cause a     denial of service (NULL pointer dereference and client     crash) by triggering a NULL certificate     value.(CVE-2014-3470)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
57731	CentOS 6 : openssl (CESA-2012:0059)	Nessus	CentOS Local Security Checks	2012/1/31	2021/1/4	medium
74722	openSUSE Security Update : openssl (openSUSE-2012-52)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
284059	MiracleLinux 4 : openssl-1.0.0-20.AXS4.1 (AXSA:2012-76:02)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	high
57459	OpenSSL 0.9.8 < 0.9.8s Multiple Vulnerabilities	Nessus	Web Servers	2012/1/9	2024/10/23	critical
57551	FreeBSD : OpenSSL -- multiple vulnerabilities (78cc8a46-3e56-11e1-89b4-001ec9578670)	Nessus	FreeBSD Local Security Checks	2012/1/16	2021/1/6	high
61747	VMSA-2012-0013 : VMware vSphere and vCOps updates to third-party libraries	Nessus	VMware ESX Local Security Checks	2012/8/31	2021/1/6	critical
66808	Mac OS X 10.8.x < 10.8.4 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2013/6/5	2024/5/28	high
66809	Mac OS X Multiple Vulnerabilities (Security Update 2013-002)	Nessus	MacOS X Local Security Checks	2013/6/5	2024/5/28	critical
89038	VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2012-0013) (remote check)	Nessus	Misc.	2016/2/29	2021/1/6	high
74901	openSUSE Security Update : openssl (openSUSE-SU-2013:0336-1)	Nessus	SuSE Local Security Checks	2014/6/13	2022/12/5	high
57570	SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 7923)	Nessus	SuSE Local Security Checks	2012/1/17	2021/1/19	high
68437	Oracle Linux 6 : openssl (ELSA-2012-0059)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high
70885	ESXi 5.0 < Build 912577 Multiple Vulnerabilities (remote check)	Nessus	Misc.	2013/11/13	2018/11/15	high
79282	RHEL 6 : rhev-hypervisor6 (RHSA-2012:0109)	Nessus	Red Hat Local Security Checks	2014/11/17	2024/6/3	high
137479	EulerOS 2.0 SP2 : openssl098e (EulerOS-SA-2020-1637)	Nessus	Huawei Local Security Checks	2020/6/17	2024/3/6	high

检测

插件搜索

medium

medium

high

critical

high

critical

high

critical

high

high

high

high

high

high

high