The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50081 advisory.

    - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469       CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420       CVE-2025-69421 CVE-2026-22795 CVE-2026-22796       Resolves: RHEL-142062       Resolves: RHEL-141985       Resolves: RHEL-142053       Resolves: RHEL-142049       Resolves: RHEL-142045       Resolves: RHEL-142041       Resolves: RHEL-142037       Resolves: RHEL-142033       Resolves: RHEL-142029       Resolves: RHEL-142008       Resolves: RHEL-142025       Resolves: RHEL-142021
    - Fix CVE-2025-9230       Resolves: RHEL-115885

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5f7d0a5656 advisory.

    Resolves: CVE-2025-15467     Resolves: CVE-2025-15468     Resolves: CVE-2025-15469     Resolves: CVE-2025-66199     Resolves: CVE-2025-68160     Resolves: CVE-2025-69418     Resolves: CVE-2025-69420     Resolves: CVE-2025-69421     Resolves: CVE-2025-69419     Resolves: CVE-2026-22795     Resolves: CVE-2026-22796     Resolves: CVE-2025-11187

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0332-1 advisory.

    - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834).
    - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837).
    - CVE-2025-69421: NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function (bsc#1256838).
    - CVE-2026-22796: ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function (bsc#1256840).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1473 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file     (CVE-2025-11187)

    * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS     parsing (CVE-2025-15467)

    * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling     (CVE-2025-15468)

    * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation     (CVE-2025-15469)

    * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate     compression (CVE-2025-66199)

    * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160)

    * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB     encryption/decryption calls (CVE-2025-69418)

    * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing     (CVE-2025-69419)

    * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421)

    * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420)

    * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795)

    * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification (CVE-2026-22796)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
297341	Oracle Linux 10 : openssl (ELSA-2026-50081)	Nessus	Oracle Linux Local Security Checks	2026/1/31	2026/4/30	high
297451	Fedora 43 : openssl (2026-5f7d0a5656)	Nessus	Fedora Local Security Checks	2026/1/31	2026/4/30	high
297423	SUSE SLES15 / openSUSE 15 Security Update : openssl-1_0_0 (SUSE-SU-2026:0332-1)	Nessus	SuSE Local Security Checks	2026/1/31	2026/2/3	high
297022	RHEL 9 : openssl (RHSA-2026:1473)	Nessus	Red Hat Local Security Checks	2026/1/28	2026/4/30	high

检测

插件搜索

high

high

high

high