It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1434 advisory.

    If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an     unknown cipher suite from the peer, a NULL dereference occurs. (CVE-2025-15468)

    A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before     decompression without checking against the configured certificate size limit. (CVE-2025-66199)

    Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO     performs short writes can trigger a heap-based out-of-bounds write. (CVE-2025-68160)

    When using the low-level OCB API directly with AES-NI or other hardware-accelerated code paths, inputs     whose length is not a multiple of 16 bytes can leave the final partial block unencrypted and     unauthenticated. (CVE-2025-69418)

    Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString     (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the     allocated buffer. (CVE-2025-69419)

    A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union     member is accessed without first validating the type, causing an invalid or NULL pointer dereference when     processing a malformed TimeStamp Response file. (CVE-2025-69420)

    Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the     PKCS12_item_decrypt_d2i_ex() function. (CVE-2025-69421)

    An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file.
    (CVE-2026-22795)

    ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function

    NOTE: https://openssl-library.org/news/secadv/20260127.txt (CVE-2026-22796)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4490 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4490-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                   Andreas Henriksson     February 23, 2026                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : openssl     Version        : 1.1.1w-0+deb11u5     CVE ID         : CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420                      CVE-2025-69421 CVE-2026-22795 CVE-2026-22796     Debian Bug     :

    Aisle Research found multiple vulnerabilites in OpenSSL, a Secure Socket Layer     toolkit providing the SSL and TLS cryptographic protocols for secure     communication over the Internet.

    CVE-2025-68160

        Petr Simecek (Aisle Research) and Stanislav Fort (Aisle Research) found         writing large, newline-free data into a BIO chain using the line-buffering         filter where the next BIO performs short writes can trigger a heap-based         out-of-bounds write. This out-of-bounds write can cause memory corruption         which typically results in a crash, leading to Denial of Service for an         application.

    CVE-2025-69418

        Stanislav Fort (Aisle Research) found using the low-level OCB API directly         with AES-NI or other hardware-accelerated code paths, inputs whose length         is not a multiple of 16 bytes can leave the final partial block unencrypted         and unauthenticated. The trailing 1-15 bytes of a message may be exposed in         cleartext on encryption and are not covered by the authentication tag,         allowing an attacker to read or tamper with those bytes without detection.

    CVE-2025-69419

        Stanislav Fort (Aisle Research) found a maliciously crafted PKCS#12 file         with a BMPString (UTF-16BE) can lead to out-of-bounds write causing a         memory corruption which can have various consequences including a Denial of         Service.

    CVE-2025-69420

        Luigino Camastra (Aisle Research) found a type confusion vulnerability         exists in the TimeStamp Response verification code, leading to an invalid         or NULL pointer dereference when processing a malformed TimeStamp Response         file. The result is a possible Denial of Service.

    CVE-2025-69421

        Luigino Camastra (Aisle Research) found out processing a malformed PKCS#12         file can trigger a NULL pointer dereference in the         PKCS12_item_decrypt_d2i_ex() function that can trigger a crash which leads         to Denial of Service for an application processing PKCS#12 files.

    CVE-2026-22795

        Luigino Camastra (Aisle Research) found that an application processing a         malformed PKCS#12 file can be caused to dereference an invalid or NULL         pointer on memory read, resulting in a Denial of Service.

    CVE-2026-22796

        Luigino Camastra (Aisle Research) found that an application performing         signature verification of PKCS#7 data or calling directly the         PKCS7_digest_from_attributes() function can be caused to dereference an         invalid or NULL pointer when reading, resulting in a Denial of Service.

    More details are available in:
    https://openssl-library.org/news/secadv/20260127.txt

    For Debian 11 bullseye, these problems have been fixed in version     1.1.1w-0+deb11u5.

    We recommend that you upgrade your openssl packages.

    For the detailed security status of openssl please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/openssl

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0332-1 advisory.

    - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834).
    - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837).
    - CVE-2025-69421: NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function (bsc#1256838).
    - CVE-2026-22796: ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function (bsc#1256840).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0404 advisory.

  - Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data     where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL     pointer dereference when processing malformed PKCS#7 data. Impact summary: An application performing     signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can     be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The     function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its     type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the     ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a     malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of     Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons     the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this     issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5,     3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. (CVE-2026-22796)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1473 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file     (CVE-2025-11187)

    * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS     parsing (CVE-2025-15467)

    * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling     (CVE-2025-15468)

    * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation     (CVE-2025-15469)

    * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate     compression (CVE-2025-66199)

    * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160)

    * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB     encryption/decryption calls (CVE-2025-69418)

    * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing     (CVE-2025-69419)

    * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421)

    * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420)

    * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795)

    * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification (CVE-2026-22796)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0309-1 advisory.

    - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830).
     - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834).
     - CVE-2025-69418: Unauthenticated/unencrypted trailing bytes with low-level OCB function calls     (bsc#1256835).
     - CVE-2025-69419: Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion (bsc#1256836).
     - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837).
     - CVE-2025-69421: NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function (bsc#1256838).
     - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839).
     - CVE-2026-22796: ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function (bsc#1256840).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-1472 advisory.

    - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469       CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420       CVE-2025-69421 CVE-2026-22795 CVE-2026-22796       Resolves: RHEL-142062       Resolves: RHEL-141985       Resolves: RHEL-142053       Resolves: RHEL-142049       Resolves: RHEL-142045       Resolves: RHEL-142041       Resolves: RHEL-142037       Resolves: RHEL-142033       Resolves: RHEL-142029       Resolves: RHEL-142008       Resolves: RHEL-142025       Resolves: RHEL-142021

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4b824428-fb93-11f0-b194-8447094a420f advisory.

    The OpenSSL project reports:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50081 advisory.

    - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469       CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420       CVE-2025-69421 CVE-2026-22795 CVE-2026-22796       Resolves: RHEL-142062       Resolves: RHEL-141985       Resolves: RHEL-142053       Resolves: RHEL-142049       Resolves: RHEL-142045       Resolves: RHEL-142041       Resolves: RHEL-142037       Resolves: RHEL-142033       Resolves: RHEL-142029       Resolves: RHEL-142008       Resolves: RHEL-142025       Resolves: RHEL-142021
    - Fix CVE-2025-9230       Resolves: RHEL-115885

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5f7d0a5656 advisory.

    Resolves: CVE-2025-15467     Resolves: CVE-2025-15468     Resolves: CVE-2025-15469     Resolves: CVE-2025-66199     Resolves: CVE-2025-68160     Resolves: CVE-2025-69418     Resolves: CVE-2025-69420     Resolves: CVE-2025-69421     Resolves: CVE-2025-69419     Resolves: CVE-2026-22795     Resolves: CVE-2026-22796     Resolves: CVE-2025-11187

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
299523	Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-1434)	Nessus	Amazon Linux Local Security Checks	2026/2/19	2026/4/30	high
299860	Debian dla-4490 : libcrypto1.1-udeb - security update	Nessus	Debian Local Security Checks	2026/2/24	2026/4/30	high
297423	SUSE SLES15 / openSUSE 15 Security Update : openssl-1_0_0 (SUSE-SU-2026:0332-1)	Nessus	SuSE Local Security Checks	2026/1/31	2026/2/3	high
306778	Splunk Universal Forwarder 9.3.0 < 9.3.11, 9.4.0 < 9.4.10, 10.0.0 < 10.0.4, 10.2.0 < 10.2.1 (SVD-2026-0404)	Nessus	CGI abuses	2026/4/16	2026/4/16	medium
297022	RHEL 9 : openssl (RHSA-2026:1473)	Nessus	Red Hat Local Security Checks	2026/1/28	2026/4/30	high
297075	SUSE SLED15 / SLES15 Security Update : openssl-3 (SUSE-SU-2026:0309-1)	Nessus	SuSE Local Security Checks	2026/1/29	2026/4/30	high
297105	Oracle Linux 10 : openssl (ELSA-2026-1472)	Nessus	Oracle Linux Local Security Checks	2026/1/29	2026/4/30	high
297209	FreeBSD : OpenSSL -- Multiple vulnerabilities (4b824428-fb93-11f0-b194-8447094a420f)	Nessus	FreeBSD Local Security Checks	2026/1/30	2026/2/3	high
297341	Oracle Linux 10 : openssl (ELSA-2026-50081)	Nessus	Oracle Linux Local Security Checks	2026/1/31	2026/4/30	high
297451	Fedora 43 : openssl (2026-5f7d0a5656)	Nessus	Fedora Local Security Checks	2026/1/31	2026/4/30	high

检测

插件搜索

high

high

high

medium

high

high

high

high

high

high