The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1940 advisory.

    - fix CVE-2016-2177 - possible integer overflow
    - fix CVE-2016-2178 - non-constant time DSA operations
    - fix CVE-2016-2179 - further DoS issues in DTLS
    - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
    - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
    - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
    - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
    - fix CVE-2016-6304 - unbound memory growth with OCSP status request
    - fix CVE-2016-6306 - certificate message OOB reads
    - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to       112 bit effective strength

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for openssl is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es) :

* A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support. (CVE-2016-6304)

* It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system. (CVE-2016-2178)

* It was discovered that the Datagram TLS (DTLS) implementation could fail to release memory in certain cases. A malicious DTLS client could cause a DTLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory. (CVE-2016-2179)

* A flaw was found in the Datagram TLS (DTLS) replay protection implementation in OpenSSL. A remote attacker could possibly use this flaw to make a DTLS server using OpenSSL to reject further packets sent from a DTLS client over an established DTLS connection.
(CVE-2016-2181)

* An out of bounds write flaw was discovered in the OpenSSL BN_bn2dec() function. An attacker able to make an application using OpenSSL to process a large BIGNUM could cause the application to crash or, possibly, execute arbitrary code. (CVE-2016-2182)

* A flaw was found in the DES/3DES cipher was used as part of the TLS/SSL protocol. A man-in-the-middle attacker could use this flaw to recover some plaintext data by capturing large amounts of encrypted traffic between TLS/ SSL server and client if the communication used a DES/3DES based ciphersuite. (CVE-2016-2183)

This update mitigates the CVE-2016-2183 issue by lowering priority of DES cipher suites so they are not preferred over cipher suites using AES. For compatibility reasons, DES cipher suites remain enabled by default and included in the set of cipher suites identified by the HIGH cipher string. Future updates may move them to MEDIUM or not enable them by default.

* An integer underflow flaw leading to a buffer over-read was found in the way OpenSSL parsed TLS session tickets. A remote attacker could use this flaw to crash a TLS server using OpenSSL if it used SHA-512 as HMAC for session tickets. (CVE-2016-6302)

* Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2016-2177)

* An out of bounds read flaw was found in the way OpenSSL formatted Public Key Infrastructure Time-Stamp Protocol data for printing. An attacker could possibly cause an application using OpenSSL to crash if it printed time stamp data from the attacker. (CVE-2016-2180)

* Multiple out of bounds read flaws were found in the way OpenSSL handled certain TLS/SSL protocol handshake messages. A remote attacker could possibly use these flaws to crash a TLS/SSL server or client using OpenSSL. (CVE-2016-6306)

Red Hat would like to thank the OpenSSL project for reporting CVE-2016-6304 and CVE-2016-6306 and OpenVPN for reporting CVE-2016-2183. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.) as the original reporter of CVE-2016-6304 and CVE-2016-6306; and Karthikeyan Bhargavan (Inria) and Gaetan Leurent (Inria) as the original reporters of CVE-2016-2183.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-686:04 advisory.

    The OpenSSL toolkit provides support for secure communications between     machines. OpenSSL includes a certificate management tool and shared     libraries which provide various cryptographic algorithms and     protocols.
    Security issues fixed with this release:
    CVE-2016-2177     OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for     heap-buffer boundary checks, which might allow remote attackers to     cause a denial of service (integer overflow and application crash) or     possibly have unspecified other impact by leveraging unexpected malloc     behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.
    CVE-2016-2178     The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL     through 1.0.2h does not properly ensure the use of constant-time     operations, which makes it easier for local users to discover a DSA     private key via a timing side-channel attack.
    CVE-2016-2179     The DTLS implementation in OpenSSL before 1.1.0 does not properly     restrict the lifetime of queue entries associated with unused     out-of-order messages, which allows remote attackers to cause a denial     of service (memory consumption) by maintaining many crafted DTLS     sessions simultaneously, related to d1_lib.c, statem_dtls.c,     statem_lib.c, and statem_srvr.c.
    CVE-2016-2180     The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509     Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in     OpenSSL through 1.0.2h allows remote attackers to cause a denial of     service (out-of-bounds read and application crash) via a crafted     time-stamp file that is mishandled by the openssl ts command.
    CVE-2016-2181     The Anti-Replay feature in the DTLS implementation in OpenSSL before     1.1.0 mishandles early use of a new epoch number in conjunction with a     large sequence number, which allows remote attackers to cause a denial     of service (false-positive packet drops) via spoofed DTLS records,     related to rec_layer_d1.c and ssl3_record.c.
    CVE-2016-2182     The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0     does not properly validate division results, which allows remote     attackers to cause a denial of service (out-of-bounds write and     application crash) or possibly have unspecified other impact via     unknown vectors.
    CVE-2016-6302     The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before     1.1.0 does not consider the HMAC size during validation of the ticket     length, which allows remote attackers to cause a denial of service via     a ticket that is too short.
    CVE-2016-6304     Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2     before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause     a denial of service (memory consumption) via large OCSP Status Request     extensions.
    CVE-2016-6306     The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before     1.0.2i might allow remote attackers to cause a denial of service     (out-of-bounds read) via crafted certificate operations, related to     s3_clnt.c and s3_srvr.c.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several vulnerabilities were discovered in OpenSSL :

  - CVE-2016-2177     Guido Vranken discovered that OpenSSL uses undefined     pointer arithmetic. Additional information can be found     at     https://www.openssl.org/blog/blog/2016/06/27/undefined-p     ointer-arithmetic/

  - CVE-2016-2178     Cesar Pereida, Billy Brumley and Yuval Yarom discovered     a timing leak in the DSA code.

  - CVE-2016-2179 / CVE-2016-2181     Quan Luo and the OCAP audit team discovered denial of     service vulnerabilities in DTLS.

  - CVE-2016-2180 / CVE-2016-2182 / CVE-2016-6303     Shi Lei discovered an out-of-bounds memory read in     TS_OBJ_print_bio() and an out-of-bounds write in     BN_bn2dec() and MDC2_Update().

  - CVE-2016-2183     DES-based cipher suites are demoted from the HIGH group     to MEDIUM as a mitigation for the SWEET32 attack.

  - CVE-2016-6302     Shi Lei discovered that the use of SHA512 in TLS session     tickets is susceptible to denial of service.

  - CVE-2016-6304     Shi Lei discovered that excessively large OCSP status     request may result in denial of service via memory     exhaustion.

  - CVE-2016-6306     Shi Lei discovered that missing message length     validation when parsing certificates may potentially     result in denial of service.

The version of MySQL running on the remote host is 5.7.x prior to 5.7.16. It is, therefore, affected by multiple vulnerabilities :

  - Multiple integer overflow conditions exist in s3_srvr.c,     ssl_sess.c, and t1_lib.c due to improper use of pointer     arithmetic for heap-buffer boundary checks. An     unauthenticated, remote attacker can exploit this to     cause a denial of service. (CVE-2016-2177)

  - An information disclosure vulnerability exists in the     dsa_sign_setup() function in dsa_ossl.c due to a failure     to properly ensure the use of constant-time operations.
    An unauthenticated, remote attacker can exploit this,     via a timing side-channel attack, to disclose DSA key     information. (CVE-2016-2178)

  - A denial of service vulnerability exists in the DTLS     implementation due to a failure to properly restrict the     lifetime of queue entries associated with unused     out-of-order messages. An unauthenticated, remote     attacker can exploit this, by maintaining multiple     crafted DTLS sessions simultaneously, to exhaust memory.
    (CVE-2016-2179)

  - An out-of-bounds read error exists in the X.509 Public     Key Infrastructure Time-Stamp Protocol (TSP)     implementation. An unauthenticated, remote attacker can     exploit this, via a crafted time-stamp file that is     mishandled by the 'openssl ts' command, to cause     denial of service or to disclose sensitive information.
    (CVE-2016-2180)

  - A denial of service vulnerability exists in the     Anti-Replay feature in the DTLS implementation due to     improper handling of epoch sequence numbers in records.
    An unauthenticated, remote attacker can exploit this,     via spoofed DTLS records, to cause legitimate packets to     be dropped. (CVE-2016-2181)

  - An overflow condition exists in the BN_bn2dec() function     in bn_print.c due to improper validation of     user-supplied input when handling BIGNUM values. An     unauthenticated, remote attacker can exploit this to     crash the process. (CVE-2016-2182)

  - A vulnerability exists, known as SWEET32, in the 3DES     and Blowfish algorithms due to the use of weak 64-bit     block ciphers by default. A man-in-the-middle attacker     who has sufficient resources can exploit this     vulnerability, via a 'birthday' attack, to detect a     collision that leaks the XOR between the fixed secret     and a known plaintext, allowing the disclosure of the     secret text, such as secure HTTPS cookies, and possibly     resulting in the hijacking of an authenticated session.
    (CVE-2016-2183)

  - An unspecified flaw exists in the Security: Encryption     subcomponent that allows an authenticated, remote     attacker to disclose sensitive information.
    (CVE-2016-5584)

  - A flaw exists in the tls_decrypt_ticket() function in     t1_lib.c due to improper handling of ticket HMAC     digests. An unauthenticated, remote attacker can exploit     this, via a ticket that is too short, to crash the     process, resulting in a denial of service.
    (CVE-2016-6302)

  - An integer overflow condition exists in the     MDC2_Update() function in mdc2dgst.c due to improper     validation of user-supplied input. An unauthenticated,     remote attacker can exploit this to cause a heap-based     buffer overflow, resulting in a denial of service     condition or possibly the execution of arbitrary code.
    (CVE-2016-6303)

  - A flaw exists in the ssl_parse_clienthello_tlsext()     function in t1_lib.c due to improper handling of overly     large OCSP Status Request extensions from clients. An     unauthenticated, remote attacker can exploit this, via     large OCSP Status Request extensions, to exhaust memory     resources, resulting in a denial of service condition.
    (CVE-2016-6304)

  - An out-of-bounds read error exists in the certificate     parser that allows an unauthenticated, remote attacker     to cause a denial of service via crafted certificate     operations. (CVE-2016-6306)

  - A flaw exists in the check_log_path() function within     file sql/sys_vars.cc due to inadequate restrictions on     the ability to write to the my.cnf configuration file     and allowing the loading of configuration files from     path locations not used by current versions. An     authenticated, remote attacker can exploit this issue     by using specially crafted queries that utilize logging     functionality to create new files or append custom     content to existing files. This allows the attacker to     gain root privileges by inserting a custom .cnf file     with a 'malloc_lib=' directive pointing to specially     crafted mysql_hookandroot_lib.so file and thereby cause     MySQL to load a malicious library the next time it is     started. (CVE-2016-6662)

  - A flaw exists in wolfSSL, specifically within the C     software version of AES Encryption and Decryption, due     to table lookups not properly considering cache-bank     access times. A local attacker can exploit this, via a     specially crafted application, to disclose AES keys.
    (CVE-2016-7440)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the Tenable Nessus application running on the remote host is 6.x prior to 6.9. It is, therefore, affected by multiple vulnerabilities :

  - Multiple integer overflow conditions exist in the     OpenSSL component in s3_srvr.c, ssl_sess.c, and t1_lib.c     due to improper use of pointer arithmetic for     heap-buffer boundary checks. An unauthenticated, remote     attacker can exploit this to cause a denial of service.
    (CVE-2016-2177)

  - An information disclosure vulnerability exists in the     OpenSSL component in the dsa_sign_setup() function in     dsa_ossl.c due to a failure to properly ensure the use     of constant-time operations. An unauthenticated, remote     attacker can exploit this, via a timing side-channel     attack, to disclose DSA key information. (CVE-2016-2178)

  - A denial of service vulnerability exists in the OpenSSL     component in the DTLS implementation due to a failure to     properly restrict the lifetime of queue entries     associated with unused out-of-order messages. An     unauthenticated, remote attacker can exploit this, by     maintaining multiple crafted DTLS sessions     simultaneously, to exhaust memory. (CVE-2016-2179)

  - An out-of-bounds read error exists in the OpenSSL     component in the X.509 Public Key Infrastructure     Time-Stamp Protocol (TSP) implementation. An     unauthenticated, remote attacker can exploit this, via a     crafted time-stamp file that is mishandled by the     'openssl ts' command, to cause denial of service or to     disclose sensitive information. (CVE-2016-2180)

  - A denial of service vulnerability exists in the OpenSSL     component in the Anti-Replay feature in the DTLS     implementation due to improper handling of epoch     sequence numbers in records. An unauthenticated, remote     attacker can exploit this, via spoofed DTLS records, to     cause legitimate packets to be dropped. (CVE-2016-2181)

  - An overflow condition exists in the OpenSSL component in     the BN_bn2dec() function in bn_print.c due to improper     validation of user-supplied input when handling BIGNUM     values. An unauthenticated, remote attacker can exploit     this to crash the process. (CVE-2016-2182)

  - A vulnerability exists, known as SWEET32, in the OpenSSL     component in the 3DES and Blowfish algorithms due to the     use of weak 64-bit block ciphers by default. A     man-in-the-middle attacker who has sufficient resources     can exploit this vulnerability, via a 'birthday' attack,     to detect a collision that leaks the XOR between the     fixed secret and a known plaintext, allowing the     disclosure of the secret text, such as secure HTTPS     cookies, and possibly resulting in the hijacking of an     authenticated session. (CVE-2016-2183)

  - A flaw exists in the OpenSSL component in the     tls_decrypt_ticket() function in t1_lib.c due to     improper handling of ticket HMAC digests.
    An unauthenticated, remote attacker can exploit this,     via a ticket that is too short, to crash the process,     resulting in a denial of service. (CVE-2016-6302)

  - An integer overflow condition exists in the OpenSSL     component in the MDC2_Update() function in mdc2dgst.c     due to improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this to     cause a heap-based buffer overflow, resulting in a     denial of service condition or possibly the execution of     arbitrary code. (CVE-2016-6303)

  - A flaw exists in the OpenSSL component in the     ssl_parse_clienthello_tlsext() function in t1_lib.c due     to improper handling of overly large OCSP Status Request     extensions from clients. An unauthenticated, remote     attacker can exploit this, via large OCSP Status Request     extensions, to exhaust memory resources, resulting in a     denial of service condition. (CVE-2016-6304)

  - A flaw exists in the OpenSSL component in the SSL_peek()     function in rec_layer_s3.c due to improper handling of     empty records. An unauthenticated, remote attacker can     exploit this, by triggering a zero-length record in an     SSL_peek call, to cause an infinite loop, resulting in a     denial of service condition. (CVE-2016-6305)

  - An out-of-bounds read error exists in the OpenSSL     component in the certificate parser that allows an     unauthenticated, remote attacker to cause a denial of     service via crafted certificate operations.
    (CVE-2016-6306)

  - A denial of service vulnerability exists in the OpenSSL     component in the state-machine implementation due to a     failure to check for an excessive length before     allocating memory. An unauthenticated, remote attacker     can exploit this, via a crafted TLS message, to exhaust     memory resources. (CVE-2016-6307)

  - A denial of service vulnerability exists in the OpenSSL     component in the DTLS implementation due to improper     handling of excessively long DTLS messages. An     unauthenticated, remote attacker can exploit this, via a     crafted DTLS message, to exhaust available memory     resources. (CVE-2016-6308)

  - A remote code execution vulnerability exists in the     OpenSSL component in the read_state_machine() function     in statem.c due to improper handling of messages larger     than 16k. An  unauthenticated, remote attacker can     exploit this, via a specially crafted message, to cause     a use-after-free error, resulting in a denial of service     condition or possibly the execution of arbitrary code.
    (CVE-2016-6309)

  - A denial of service vulnerability exists in the OpenSSL     component in x509_vfy.c due to improper handling of     certificate revocation lists (CRLs). An unauthenticated,     remote attacker can exploit this, via a specially     crafted CRL, to cause a NULL pointer dereference,     resulting in a crash of the service. (CVE-2016-7052)

  - A cross-site scripting (XSS) vulnerability exists due to     improper validation of user-supplied input. An     authenticated, remote attacker can exploit this, via a     specially crafted request, to execute arbitrary script     code in a user's browser session. (CVE-2016-9260)

The version of Oracle Enterprise Manager Grid Control installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities :

  - Multiple integer overflow conditions exist in the     OpenSSL component in s3_srvr.c, ssl_sess.c, and t1_lib.c     due to improper use of pointer arithmetic for     heap-buffer boundary checks. An unauthenticated, remote     attacker can exploit this to cause a denial of service     condition. (CVE-2016-2177)

  - An information disclosure vulnerability exists in the     OpenSSL component in dsa_sign_setup() function in     dsa_ossl.c due to a failure to properly ensure the use     of constant-time operations. An unauthenticated, remote     attacker can exploit this, via a timing side-channel     attack, to disclose DSA key information. (CVE-2016-2178)

  - A denial of service vulnerability exists in the OpenSSL     component in the DTLS implementation due to a failure to     properly restrict the lifetime of queue entries     associated with unused out-of-order messages. An     unauthenticated, remote attacker can exploit this, by     maintaining multiple crafted DTLS sessions     simultaneously, to exhaust memory. (CVE-2016-2179)

  - An out-of-bounds read error exists in the OpenSSL     component in the X.509 Public Key Infrastructure     Time-Stamp Protocol (TSP) implementation. An     unauthenticated, remote attacker can exploit this, via a     crafted time-stamp file that is mishandled by the     'openssl ts' command, to cause denial of service or to     disclose sensitive information. (CVE-2016-2180)

  - A denial of service vulnerability exists in the OpenSSL     component in the Anti-Replay feature in the DTLS     implementation due to improper handling of epoch     sequence numbers in records. An unauthenticated, remote     attacker can exploit this, via spoofed DTLS records, to     cause legitimate packets to be dropped. (CVE-2016-2181)

  - An overflow condition exists in the OpenSSL component in     the BN_bn2dec() function in bn_print.c due to improper     validation of user-supplied input when handling BIGNUM     values. An unauthenticated, remote attacker can exploit     this to crash the process. (CVE-2016-2182)

  - A vulnerability exists in the OpenSSL component, known     as SWEET32, in the 3DES and Blowfish algorithms due to     the use of weak 64-bit block ciphers by default. A     man-in-the-middle attacker who has sufficient resources     can exploit this vulnerability, via a 'birthday' attack,     to detect a collision that leaks the XOR between the     fixed secret and a known plaintext, allowing the     disclosure of the secret text, such as secure HTTPS     cookies, and possibly resulting in the hijacking of an     authenticated session. (CVE-2016-2183)

  - A denial of service vulnerability exists in the Apache     Commons FileUpload component due to improper handling of     boundaries in content-type headers when handling file     upload requests. An unauthenticated, remote attacker can     exploit this to cause processes linked against the     library to become unresponsive. (CVE-2016-3092)

  - A flaw exists in the OpenSSL component in the     tls_decrypt_ticket() function in t1_lib.c due to     improper handling of ticket HMAC digests. An     unauthenticated, remote attacker can exploit this, via a     ticket that is too short, to crash the process,     resulting in a denial of service. (CVE-2016-6302)

  - An integer overflow condition exists in the OpenSSL     component in the MDC2_Update() function in mdc2dgst.c     due to improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this to     cause a heap-based buffer overflow, resulting in a     denial of service condition or possibly the execution of     arbitrary code. (CVE-2016-6303)

  - A flaw exists in the OpenSSL component in the     ssl_parse_clienthello_tlsext() function in t1_lib.c due     to improper handling of overly large OCSP Status Request     extensions from clients. An unauthenticated, remote     attacker can exploit this, via large OCSP Status Request     extensions, to exhaust memory resources, resulting in a     denial of service condition. (CVE-2016-6304)

  - A flaw exists in the OpenSSL component in the SSL_peek()     function in rec_layer_s3.c due to improper handling of     empty records. An unauthenticated, remote attacker can     exploit this, by triggering a zero-length record in an     SSL_peek call, to cause an infinite loop, resulting in a     denial of service condition. (CVE-2016-6305)

  - An out-of-bounds read error exists in the OpenSSL     component in the certificate parser that allows an     unauthenticated, remote attacker to cause a denial of     service via crafted certificate operations.
    (CVE-2016-6306)

  - A denial of service vulnerability exists in the OpenSSL     component in the state-machine implementation due to a     failure to check for an excessive length before     allocating memory. An unauthenticated, remote attacker     can exploit this, via a crafted TLS message, to exhaust     memory resources. (CVE-2016-6307)

  - A denial of service vulnerability exists in the OpenSSL     component in the DTLS implementation due to improper     handling of excessively long DTLS messages. An     unauthenticated, remote attacker can exploit this, via a     crafted DTLS message, to exhaust available memory     resources. (CVE-2016-6308)

  - A remote code execution vulnerability exists in the     OpenSSL component in the read_state_machine() function     in statem.c due to improper handling of messages larger     than 16k. An unauthenticated, remote attacker can     exploit this, via a specially crafted message, to cause     a use-after-free error, resulting in a denial of service     condition or possibly the execution of arbitrary code.
    (CVE-2016-6309)

  - A denial of service vulnerability exists in the OpenSSL     component in x509_vfy.c due to improper handling of     certificate revocation lists (CRLs). An unauthenticated,     remote attacker can exploit this, via a specially     crafted CRL, to cause a NULL pointer dereference,     resulting in a crash of the service condition.
    (CVE-2016-7052)

  - An unspecified flaw exists in the Discovery Framework     subcomponent that allows an unauthenticated, remote     attacker to cause a denial of service condition.
    (CVE-2017-3518)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries     associated with unused out-of-order messages, which allows remote attackers to cause a denial of service     (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c,     statem_dtls.c, statem_lib.c, and statem_srvr.c. (CVE-2016-2179)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Oracle HTTP Server installed on the remote host is affected by multiple vulnerabilities as noted in the January 2018 CPU advisory.

According to the version of the openssl098e package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The DTLS implementation in OpenSSL before 1.1.0 does     not properly restrict the lifetime of queue entries     associated with unused out-of-order messages, which     allows remote attackers to cause a denial of service     (memory consumption) by maintaining many crafted DTLS     sessions simultaneously, related to d1_lib.c,     statem_dtls.c, statem_lib.c, and     statem_srvr.c.(CVE-2016-2179)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Oracle Secure Global Desktop installed on the remote host is 4.71, 5.2, or 5.3 and is missing a security patch from the April 2017 Critical Patch Update (CPU). It is, therefore, affected by multiple vulnerabilities :

  - An integer overflow condition exists in the Window System     (X11) subcomponent in multiple functions in X.Org libExt     due to improper validation of user-supplied input when     calculating the amount of memory required to handle     return data. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code. Note that this issue     only affects version 4.71. (CVE-2013-1982)

  - An integer overflow condition exists in X.Org libXfixes     in the XFixesGetCursorImage() function when handling     large cursor dimensions or name lengths due to improper     validation of user-supplied input. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2013-1983)

  - An integer overflow condition exists within multiple     functions in X.Org libXi due to improper validation of     user-supplied input when calculating the amount of     memory needed to handle return data. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2013-1984)

  - An integer overflow condition exists in X.Org     libXinerama in the XineramaQueryScreens() function due     to improper validation of user-supplied input when     calculating the amount of memory needed to handle return     data. An unauthenticated, remote attacker can exploit     this to cause a denial of service condition or the     execution of arbitrary code. (CVE-2013-1985)

  - An integer overflow condition exists in multiple     functions in X.Org libXrandr due to improper validation     of user-supplied input when calculating the amount of     memory needed to handle return data. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2013-1986)

  - An integer overflow condition exists in multiple     functions in X.Org libXrender due to improper validation     of user-supplied input when calculating the amount of     memory needed to handle return data. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2013-1987)

  - An overflow condition exists in X.Org libXi in the     XListInputDevices() function, related to an unexpected     sign extension, due to improper checking of the amount     of memory needed to handle returned data when converting     smaller integer types to larger ones. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2013-1995)

  - An overflow condition exists within multiple functions     in X.Org LibXi due to improper validation of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a specially crafted length or     index, to cause a denial of service condition or the     execution of arbitrary code. (CVE-2013-1998)

  - An overflow condition exists in X.Org LibXt in the
    _XtResourceConfigurationEH() function due to improper     validation of user-supplied input. An unauthenticated,     remote attacker can exploit this, via a specially     crafted length or index, to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2013-2002)

  - An integer overflow condition exists in X.Org libXcursor     in the  _XcursorFileHeaderCreate() function due to     improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this, via     a specially crafted file, to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2013-2003)

  - An uninitialized pointer flaw exists within multiple     functions in X.Org LibXt due to a failure to check for     proper initialization of pointers. An unauthenticated,     remote attacker can exploit this to corrupt memory,     resulting in a denial of service condition or the     possible execution of arbitrary code. (CVE-2013-2005)

  - A flaw exists in the Application Server subcomponent     (Apache Tomcat) due to a failure to process passwords     when they are paired with non-existent usernames. An     authenticated, remote attacker can exploit this, via a     timing attack, to enumerate user account names.
    (CVE-2016-0762)

  - Multiple integer overflow conditions exist in s3_srvr.c,     ssl_sess.c, and t1_lib.c due to improper use of pointer     arithmetic for heap-buffer boundary checks. An     unauthenticated, remote attacker can exploit these to     cause a denial of service. (CVE-2016-2177)

  - An information disclosure vulnerability exists in the     dsa_sign_setup() function in dsa_ossl.c due to a failure     to properly ensure the use of constant-time operations.
    An unauthenticated, remote attacker can exploit this,     via a timing side-channel attack, to disclose DSA key     information. (CVE-2016-2178)

  - A denial of service vulnerability exists in the DTLS     implementation due to a failure to properly restrict the     lifetime of queue entries associated with unused     out-of-order messages. An unauthenticated, remote     attacker can exploit this, by maintaining multiple     crafted DTLS sessions simultaneously, to exhaust memory.
    (CVE-2016-2179)

  - An out-of-bounds read error exists in the X.509 Public     Key Infrastructure Time-Stamp Protocol (TSP)     implementation. An unauthenticated, remote attacker can     exploit this, via a crafted time-stamp file that is     mishandled by the 'openssl ts' command, to cause a     denial of service or to disclose sensitive information.
    (CVE-2016-2180)

  - A denial of service vulnerability exists in the     Anti-Replay feature in the DTLS implementation due to     improper handling of epoch sequence numbers in records.
    An unauthenticated, remote attacker can exploit this,     via spoofed DTLS records, to cause legitimate packets to     be dropped. (CVE-2016-2181)

  - An overflow condition exists in the BN_bn2dec() function     in bn_print.c due to improper validation of     user-supplied input when handling BIGNUM values. An     unauthenticated, remote attacker can exploit this to     crash the process. (CVE-2016-2182)

  - A vulnerability exists, known as SWEET32, in the 3DES     and Blowfish algorithms due to the use of weak 64-bit     block ciphers by default. A man-in-the-middle attacker     who has sufficient resources can exploit this     vulnerability, via a 'birthday' attack, to detect a     collision that leaks the XOR between the fixed secret     and a known plaintext, allowing the disclosure of the     secret text, such as secure HTTPS cookies, and possibly     resulting in the hijacking of an authenticated session.
    (CVE-2016-2183)

  - A flaw exists in the Core subcomponent, specifically in     the libcurl library, due to improper validation of TLS     certificates. An authenticated, remote attacker with the     ability to intercept network traffic can exploit this     issue to disclose or manipulate transmitted data by     spoofing the TLS/SSL server using a certificate that     appears valid. Note that this issue only affects     versions 5.2 and 5.3. (CVE-2016-3739)

  - A flaw exists in cURL and libcurl when loading dynamic     link library (DLL) files security.dll, secur32.dll, or     ws2_32.dll due searching an insecure path which may not     be trusted or under user control. A local attacker can     exploit this, via a Trojan DLL file placed in the search     path, to execute arbitrary code with the privileges of     the user running the program. (CVE-2016-4802)

  - A security bypass vulnerability exists in Apache Tomcat     due to an unspecified flaw related to web applications.
    A local attacker can exploit this, via a utility method     that is available to web applications, to bypass a     configured SecurityManager. (CVE-2016-5018)

  - An out-of-bounds access error exists in the Window     System (X11) subcomponent, specifically in the     XvQueryAdaptors() function in file Xv.c, when handling     server responses. An authenticated, remote attacker can     exploit this to impact confidentiality, integrity, and     availability. (CVE-2016-5407)

  - A use-after-free error exists in cURL and libcurl within     file lib/vtls/vtls.c due to the program attempting to     resume TLS sessions even if the client certificate     fails. An unauthenticated, remote attacker can exploit     this to bypass validation mechanisms, allowing the     attacker to possibly control which connection is used.
    (CVE-2016-5419)

  - A flaw exists in cURL and libcurl in the     Curl_ssl_config_matches() function within file     lib/vtls/vtls.c due to the program reusing TLS     connections with different client certificates. An     unauthenticated, remote attacker can exploit this to     disclose sensitive cross-realm information.
    (CVE-2016-5420)

  - A use-after-free error exists in cURL and libcurl in     in the close_all_connections() function within file     lib/multi.c due to connection pointers not being     properly cleared. An unauthenticated, remote attacker     can exploit this to have an unspecified impact on     confidentiality, integrity, and availability.
    (CVE-2016-5421)

  - A flaw exists in the tls_decrypt_ticket() function     in t1_lib.c due to improper handling of ticket HMAC     digests. An unauthenticated, remote attacker can exploit     this, via a ticket that is too short, to crash the     process, resulting in a denial of service.
    (CVE-2016-6302)

  - An integer overflow condition exists in the     MDC2_Update() function in mdc2dgst.c due to improper     validation of user-supplied input. An unauthenticated,     remote attacker can exploit this to cause a heap-based     buffer overflow, resulting in a denial of service     condition or possibly the execution of arbitrary code.
    (CVE-2016-6303)

  - A flaw exists in the ssl_parse_clienthello_tlsext()     function in t1_lib.c due to improper handling of overly     large OCSP Status Request extensions from clients. An     unauthenticated, remote attacker can exploit this, via     large OCSP Status Request extensions, to exhaust memory     resources, resulting in a denial of service condition.
    (CVE-2016-6304)

  - A flaw exists in the SSL_peek() function in     rec_layer_s3.c due to improper handling of empty     records. An unauthenticated, remote attacker can exploit     this, by triggering a zero-length record in an SSL_peek     call, to cause an infinite loop, resulting in a denial     of service condition. (CVE-2016-6305)

  - An out-of-bounds read error exists in the certificate     parser that allows an unauthenticated, remote attacker     to cause a denial of service via crafted certificate     operations. (CVE-2016-6306)

  - A denial of service vulnerability exists in the     state-machine implementation due to a failure to check     for an excessive length before allocating memory. An     unauthenticated, remote attacker can exploit this, via a     crafted TLS message, to exhaust memory resources.
    (CVE-2016-6307)

  - A denial of service vulnerability exists in the DTLS     implementation due to improper handling of excessively     long DTLS messages. An unauthenticated, remote attacker     can exploit this, via a crafted DTLS message, to exhaust     available memory resources. (CVE-2016-6308)

  - A flaw exists in Apache Tomcat within SecurityManager     due to improper restriction of access to system     properties by the configuration files system property     replacement feature. A local attacker can exploit this,     via a crafted web application, to bypass SecurityManager     restrictions and disclose system properties.
    (CVE-2016-6794)

  - A flaw exists in Apache Tomcat that allows a local     attacker to bypass a configured SecurityManager by     changing the configuration parameters for the JSP     Servlet. (CVE-2016-6796)

  - A flaw exists in Apache Tomcat due to a failure to limit     web application access to global JNDI resources. A local     attacker can exploit this to gain unauthorized access to     resources. (CVE-2016-6797)

  - A flaw exists in Apache Tomcat when handling request     lines containing certain invalid characters. An     unauthenticated, remote attacker can exploit this to     conduct HTTP response splitting attacks by injecting     additional headers into responses. (CVE-2016-6816)

  - An infinite loop condition exists in Apache Tomcat in     the HTTP/2 parser when handling overly large headers. An     unauthenticated, remote attacker can exploit this, via a     specially crafted request, to cause a denial of service     condition. (CVE-2016-6817)

  - A carry propagation error exists in the     Broadwell-specific Montgomery multiplication procedure     when handling input lengths divisible by but longer than     256 bits. This can result in transient authentication     and key negotiation failures or reproducible erroneous     outcomes of public-key operations with specially crafted     input. A man-in-the-middle attacker can possibly exploit     this issue to compromise ECDH key negotiations that     utilize Brainpool P-512 curves. (CVE-2016-7055)

  - A flaw exists in cURL in the Curl_cookie_init() function     within file lib/cookie.c when handling cookies. An     unauthenticated, remote attacker can exploit this to     inject new cookies for arbitrary domains.
    (CVE-2016-8615)

  - A flaw exists in cURL in the ConnectionExists() function     within file lib/url.c when checking credentials supplied     for reused connections due to the comparison being     case-insensitive. An unauthenticated, remote attacker     can exploit this to authenticate without knowing the     proper case of the username and password.
    (CVE-2016-8616)

  - An integer overflow condition exists in cURL in the     base64_encode() function within file lib/base64.c due to     improper validation of certain input. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2016-8617)

  - A denial of service vulnerability exists in cURL in the     alloc_addbyter() function within file lib/mprintf.c due     to improper validation of overly long input when it is     supplied to the curl_maprintf() API method. An     unauthenticated, remote attacker can exploit this to     free already freed memory and thereby crash the program.
    (CVE-2016-8618)

  - A double-free error exists in cURL in the read_data()     function within file lib/security.c when handling     Kerberos authentication. An unauthenticated, remote     attacker can exploit this to free already freed memory,     resulting in an unspecified impact on confidentiality,     integrity, and availability. (CVE-2016-8619)

  - An out-of-bounds access error exists in cURL in file     tool_urlglob.c within the globbing feature. An     unauthenticated, remote attacker can exploit this to     disclose memory contents or execute arbitrary code.
    (CVE-2016-8620)

  - An out-of-bounds error exists in cURL in the parsedate()     function within file lib/parsedate.c when handling     dates. An unauthenticated, remote attacker can exploit     this to disclose memory contents or cause a denial of     service condition. (CVE-2016-8621)

  - An integer truncation error exists in cURL in the     curl_easy_unescape() function within file lib/escape.c     when handling overly large URLs. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2016-8622)

  - A use-after-free error exists in cURL within file     lib/cookie.c when handling shared cookies. An     unauthenticated, remote attacker can exploit this to     disclose memory contents. (CVE-2016-8623)

  - A flaw exists in cURL in the parseurlandfillconn()     function within file lib/url.c when parsing the     authority component of a URL with the host name part     ending in a '#' character. An unauthenticated, remote     attacker can exploit this to establish a connection to     a different host than intended. (CVE-2016-8624)

  - A flaw exists in cURL within International Domain Names     (IDNA) handling when translating domain names to puny     code for DNS resolving due to using the outdated IDNA     2003 standard instead of the IDNA 2008 standard, which     can result in incorrect translation of a domain name.
    An unauthenticated, remote attacker can exploit this to     cause network traffic to be redirected to a different     host than intended. (CVE-2016-8625)

  - A flaw exists in Apache Tomcat within the     catalina/mbeans/JmxRemoteLifecycleListener.java class     that is triggered during the deserialization of Java     objects. An unauthenticated, remote attacker can exploit     this to execute arbitrary code. (CVE-2016-8735)

  - A flaw exists in the Web Server component (Apache HTTP     Server) when handling whitespace patterns in User-Agent     headers. An authenticated, remote attacker can exploit     this, via a specially crafted User-Agent header, to     cause incorrect processing of sequences of requests,     resulting in incorrectly interpreting responses,     polluting the cache, or disclosing content from one     request to a second downstream user-agent.
    (CVE-2016-8743)

  - A NULL pointer dereference flaw exists within file     ssl/statem/statem_clnt.c when handling parameters for     the DHE or ECDHE key exchanges. An unauthenticated,     remote attacker can exploit this, via specially crafted     parameters, to cause a denial of service condition.
    (CVE-2017-3730)

  - A out-of-bounds read error exists exists in the Core     subcomponent, specifically in OpenSSL, when handling     packets using the CHACHA20/POLY1305 or RC4-MD5 ciphers.
    An unauthenticated, remote attacker can exploit this,     via specially crafted truncated packets, to cause a     denial of service condition. (CVE-2017-3731)

  - A carry propagating error exists in the x86_64     Montgomery squaring implementation that may cause the     BN_mod_exp() function to produce incorrect results. An     unauthenticated, remote attacker with sufficient     resources can exploit this to obtain sensitive     information regarding private keys. Note that this issue     is very similar to CVE-2015-3193. Moreover, the attacker     would additionally need online access to an unpatched     system using the target private key in a scenario with     persistent DH parameters and a private key that is     shared between multiple clients. For example, this can     occur by default in OpenSSL DHE based SSL/TLS cipher     suites. (CVE-2017-3732)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Tenable SecurityCenter application installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities in the bundled version of OpenSSL :

  - Multiple integer overflow conditions exist in s3_srvr.c,     ssl_sess.c, and t1_lib.c due to improper use of pointer     arithmetic for heap-buffer boundary checks. An     unauthenticated, remote attacker can exploit this to     cause a denial of service. (CVE-2016-2177)

  - An information disclosure vulnerability exists in the     dsa_sign_setup() function in dsa_ossl.c due to a failure     to properly ensure the use of constant-time operations.
    An unauthenticated, remote attacker can exploit this,     via a timing side-channel attack, to disclose DSA key     information. (CVE-2016-2178)

  - A denial of service vulnerability exists in the DTLS     implementation due to a failure to properly restrict the     lifetime of queue entries associated with unused     out-of-order messages. An unauthenticated, remote     attacker can exploit this, by maintaining multiple     crafted DTLS sessions simultaneously, to exhaust memory.
    (CVE-2016-2179)

  - An out-of-bounds read error exists in the X.509 Public     Key Infrastructure Time-Stamp Protocol (TSP)     implementation. An unauthenticated, remote attacker can     exploit this, via a crafted time-stamp file that is     mishandled by the 'openssl ts' command, to cause     denial of service or to disclose sensitive information.
    (CVE-2016-2180)

  - A denial of service vulnerability exists in the     Anti-Replay feature in the DTLS implementation due to     improper handling of epoch sequence numbers in records.
    An unauthenticated, remote attacker can exploit this,     via spoofed DTLS records, to cause legitimate packets to     be dropped. (CVE-2016-2181)

  - An overflow condition exists in the BN_bn2dec() function     in bn_print.c due to improper validation of     user-supplied input when handling BIGNUM values. An     unauthenticated, remote attacker can exploit this to     crash the process. (CVE-2016-2182)

  - A vulnerability exists, known as SWEET32, in the 3DES     and Blowfish algorithms due to the use of weak 64-bit     block ciphers by default. A man-in-the-middle attacker     who has sufficient resources can exploit this     vulnerability, via a 'birthday' attack, to detect a     collision that leaks the XOR between the fixed secret     and a known plaintext, allowing the disclosure of the     secret text, such as secure HTTPS cookies, and possibly     resulting in the hijacking of an authenticated session.
    (CVE-2016-2183)

  - A flaw exists in the tls_decrypt_ticket() function in     t1_lib.c due to improper handling of ticket HMAC     digests. An unauthenticated, remote attacker can exploit     this, via a ticket that is too short, to crash the     process, resulting in a denial of service.
    (CVE-2016-6302)

  - An integer overflow condition exists in the     MDC2_Update() function in mdc2dgst.c due to improper     validation of user-supplied input. An unauthenticated,     remote attacker can exploit this to cause a heap-based     buffer overflow, resulting in a denial of service     condition or possibly the execution of arbitrary code.
    (CVE-2016-6303)

  - A flaw exists in the ssl_parse_clienthello_tlsext()     function in t1_lib.c due to improper handling of overly     large OCSP Status Request extensions from clients. An     unauthenticated, remote attacker can exploit this, via     large OCSP Status Request extensions, to exhaust memory     resources, resulting in a denial of service condition.
    (CVE-2016-6304)

  - An out-of-bounds read error exists in the certificate     parser that allows an unauthenticated, remote attacker     to cause a denial of service via crafted certificate     operations. (CVE-2016-6306)

  - A flaw exists in the GOST ciphersuites due to the use of     long-term keys to establish an encrypted connection. A     man-in-the-middle attacker can exploit this, via a Key     Compromise Impersonation (KCI) attack, to impersonate     the server.

This update for openssl fixes the following issues: OpenSSL Security Advisory [22 Sep 2016] (bsc#999665) Severity: High

  - OCSP Status Request extension unbounded memory growth     (CVE-2016-6304) (bsc#999666) Severity: Low

  - Pointer arithmetic undefined behaviour (CVE-2016-2177)     (bsc#982575)

  - Constant time flag not preserved in DSA signing     (CVE-2016-2178) (bsc#983249)

  - DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)

  - OOB read in TS_OBJ_print_bio() (CVE-2016-2180)     (bsc#990419)

  - DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)

  - OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)

  - Birthday attack against 64-bit block ciphers (SWEET32)     (CVE-2016-2183) (bsc#995359)

  - Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)

  - OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)

  - Certificate message OOB reads (CVE-2016-6306)     (bsc#999668) More information can be found on:
    https://www.openssl.org/news/secadv/20160922.txt Also     following bugs were fixed :

  - update expired S/MIME certs (bsc#979475)

  - improve s390x performance (bsc#982745)

  - allow >= 64GB AESGCM transfers (bsc#988591)

  - fix crash in print_notice (bsc#998190)

  - resume reading from /dev/urandom when interrupted by a     signal (bsc#995075)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.2.x prior to 3.2.5.1141.
It is, therefore, affected by multiple vulnerabilities :

  - Multiple integer overflow conditions exist in the     bundled version of OpenSSL in s3_srvr.c, ssl_sess.c, and     t1_lib.c due to improper use of pointer arithmetic for     heap-buffer boundary checks. An unauthenticated, remote     attacker can exploit this to cause a denial of service.
    (CVE-2016-2177)

  - An information disclosure vulnerability exists in the     bundled version of OpenSSL in the dsa_sign_setup()     function in dsa_ossl.c due to a failure to properly     ensure the use of constant-time operations. An     unauthenticated, remote attacker can exploit this, via a     timing side-channel attack, to disclose DSA key     information. (CVE-2016-2178)

  - A denial of service vulnerability exists in the bundled     version of OpenSSL in the DTLS implementation due to a     failure to properly restrict the lifetime of queue     entries associated with unused out-of-order messages. An     unauthenticated, remote attacker can exploit this, by     maintaining multiple crafted DTLS sessions     simultaneously, to exhaust memory. (CVE-2016-2179)

  - An out-of-bounds read error exists in the bundled     version of OpenSSL in the X.509 Public Key     Infrastructure Time-Stamp Protocol (TSP) implementation.
    An unauthenticated, remote attacker can exploit this,     via a crafted time-stamp file that is mishandled by the     'openssl ts' command, to cause  denial of service or to     disclose sensitive information. (CVE-2016-2180)

  - A denial of service vulnerability exists in the bundled     version of OpenSSL in the Anti-Replay feature in the     DTLS implementation due to improper handling of epoch     sequence numbers in records. An unauthenticated, remote     attacker can exploit this, via spoofed DTLS records, to     cause legitimate packets to be dropped. (CVE-2016-2181)

  - An overflow condition exists in the bundled version of     OpenSSL in the BN_bn2dec() function in bn_print.c due to     improper validation of user-supplied input when handling     BIGNUM values. An unauthenticated, remote attacker can     exploit this to crash the process. (CVE-2016-2182)

  - A vulnerability exists, known as SWEET32, in the bundled     version of OpenSSL in the 3DES and Blowfish algorithms     due to the use of weak 64-bit block ciphers by default.
    A man-in-the-middle attacker who has sufficient     resources can exploit this vulnerability, via a     'birthday' attack, to detect a collision that leaks the     XOR between the fixed secret and a known plaintext,     allowing the disclosure of the secret text, such as     secure HTTPS cookies, and possibly resulting in the     hijacking of an authenticated session. (CVE-2016-2183)     
  - A flaw exists in the bundled version of OpenSSL in the     tls_decrypt_ticket() function in t1_lib.c due to     improper handling of ticket HMAC digests. An     unauthenticated, remote attacker can exploit this, via a     ticket that is too short, to crash the process,     resulting in a denial of service. (CVE-2016-6302)

  - An integer overflow condition exists in the bundled     version of OpenSSL in the  MDC2_Update() function in     mdc2dgst.c due to improper validation of user-supplied     input. An unauthenticated, remote attacker can exploit     this to cause a heap-based buffer overflow, resulting in     a denial of service condition or possibly the execution     of arbitrary code. (CVE-2016-6303)

  - A denial of service vulnerability exists in the bundled     version of OpenSSL in the ssl_parse_clienthello_tlsext()     function in t1_lib.c due to improper handling of overly     large OCSP Status Request extensions from clients. An     unauthenticated, remote attacker can exploit this, via     large OCSP Status Request extensions, to exhaust memory     resources. (CVE-2016-6304)

  - An out-of-bounds read error exists in the bundled     version of OpenSSL in the certificate parser that allows     an unauthenticated, remote attacker to cause a denial of     service via crafted certificate operations.
    (CVE-2016-6306)

The remote OracleVM system is missing necessary patches to address critical security updates :

  - fix CVE-2016-2177 - possible integer overflow

  - fix CVE-2016-2178 - non-constant time DSA operations

  - fix CVE-2016-2179 - further DoS issues in DTLS

  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio

  - fix CVE-2016-2181 - DTLS1 replay protection and     unprocessed records issue

  - fix CVE-2016-2182 - possible buffer overflow in     BN_bn2dec

  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC     length check

  - fix CVE-2016-6304 - unbound memory growth with OCSP     status request

  - fix CVE-2016-6306 - certificate message OOB reads

  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers     and RC4 to 112 bit effective strength

  - replace expired testing certificates

  - fix CVE-2016-2105 - possible overflow in base64 encoding

  - fix CVE-2016-2106 - possible overflow in     EVP_EncryptUpdate

  - fix CVE-2016-2107 - padding oracle in stitched AES-NI     CBC-MAC

  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder

  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data     from BIO

  - fix CVE-2016-0799 - memory issues in BIO_printf

According to its self-reported version, the Oracle iPlanet Web Server (formerly known as Sun Java System Web Server) running on the remote host is 7.0.x prior to 7.0.27 Patch 26834070. It is, therefore, affected by an unspecified vulnerability in the Network Security Services (NSS) library with unknown impact.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
93759	Oracle Linux 6 / 7 : openssl (ELSA-2016-1940)	Nessus	Oracle Linux Local Security Checks	2016/9/28	2026/1/23	critical
93763	RHEL 6 / 7 : openssl (RHSA-2016:1940)	Nessus	Red Hat Local Security Checks	2016/9/28	2026/1/23	critical
93777	CentOS 6 / 7 : openssl (CESA-2016:1940)	Nessus	CentOS Local Security Checks	2016/9/28	2026/1/23	critical
289655	MiracleLinux 4 : openssl-1.0.1e-48.3.0.1.AXS4 (AXSA:2016-686:04)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical
93668	Debian DSA-3673-1 : openssl - security update	Nessus	Debian Local Security Checks	2016/9/23	2026/1/23	critical
94198	MySQL 5.7.x < 5.7.16 Multiple Vulnerabilities (October 2016 CPU) (SWEET32)	Nessus	Databases	2016/10/21	2020/6/3	critical
97192	Tenable Nessus 6.x < 6.9 Multiple Vulnerabilities (TNS-2016-16) (SWEET32)	Nessus	CGI abuses : XSS	2017/2/15	2024/6/12	critical
99594	Oracle Enterprise Manager Grid Control Multiple Vulnerabilities (April 2017 CPU) (SWEET32)	Nessus	Misc.	2017/4/21	2025/12/23	critical
219313	Linux Distros Unpatched Vulnerability : CVE-2016-2179	Nessus	Misc.	2025/3/4	2026/8/4	high
106299	Oracle Fusion Middleware Oracle HTTP Server Multiple Vulnerabilities (January 2018 CPU)	Nessus	Web Servers	2018/1/24	2024/6/19	critical
135549	EulerOS 2.0 SP3 : openssl098e (EulerOS-SA-2020-1420)	Nessus	Huawei Local Security Checks	2020/4/15	2022/5/13	high
99930	Oracle Secure Global Desktop Multiple Vulnerabilities (April 2017 CPU) (SWEET32)	Nessus	Misc.	2017/5/2	2023/5/14	critical
101045	Tenable SecurityCenter OpenSSL 1.0.1 < 1.0.1u Multiple Vulnerabilities (SWEET32)	Nessus	Misc.	2017/6/26	2020/10/9	critical
93734	SUSE SLES12 Security Update : openssl (SUSE-SU-2016:2387-1)	Nessus	SuSE Local Security Checks	2016/9/27	2026/1/23	critical
96770	MySQL Enterprise Monitor 3.2.x < 3.2.5.1141 Multiple Vulnerabilities (SWEET32) (January 2017 CPU)	Nessus	CGI abuses	2017/1/25	2019/11/13	critical
93761	OracleVM 3.3 / 3.4 : openssl (OVMSA-2016-0135)	Nessus	OracleVM Local Security Checks	2016/9/28	2026/1/23	critical
106349	Oracle iPlanet Web Server 7.0.x < 7.0.27 NSS Unspecified Vulnerability (January 2018 CPU)	Nessus	Web Servers	2018/1/25	2023/4/25	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

high

critical

high

critical

critical

critical

critical

critical

critical