The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component:

  - A deserialization vulnerability in Apache Commons     FileUpload allows for remote code execution.
    (CVE-2016-1000031)

  - An information disclosure vulnerability exists in OpenSSL     due to the potential for a side-channel timing attack.
    An unauthenticated attacker can exploit this to disclose     potentially sensitive information. (CVE-2018-0734)

  - A denial of service (DoS) vulnerability exists in Apache     HTTP Server 2.4.17 to 2.4.34, due to a design error. An     unauthenticated, remote attacker can exploit this issue     by sending continuous, large SETTINGS frames to cause a     client to occupy a connection, server thread and CPU     time without any connection timeout coming to effect.
    This affects only HTTP/2 connections. A possible     mitigation is to not enable the h2 protocol.
    (CVE-2018-11763).

  - Networking component of Enterprise Manager Base Platform     (Spring Framework) is easily exploited and may allow an     unauthenticated, remote attacker to takeover the     Enterprise Manager Base Platform. (CVE-2018-1258)

According to the version of the compat-openssl10 package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A microprocessor side-channel vulnerability was found     on SMT (e.g, Hyper-Threading) architectures. An     attacker running a malicious process on the same core     of the processor as the victim process can extract     certain secret information.(CVE-2018-5407)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openssl110f packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The OpenSSL DSA signature algorithm has been shown to     be vulnerable to a timing side channel attack. An     attacker could use variations in the signing algorithm     to recover the private key. Fixed in OpenSSL 1.1.1a     (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected     1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected     1.0.2-1.0.2p).(CVE-2018-0734)

  - Simultaneous Multi-threading (SMT) in processors can     enable local users to exploit software vulnerable to     timing attacks via a side-channel timing attack on     'port contention'.(CVE-2018-5407)

  - Normally in OpenSSL EC groups always have a co-factor     present and this is used in side channel resistant code     paths. However, in some cases, it is possible to     construct a group using explicit parameters (instead of     using a named curve). In those cases it is possible     that such a group does not have the cofactor present.
    This can occur even where all the parameters match a     known named curve. If such a curve is used then OpenSSL     falls back to non-side channel resistant code paths     which may result in full key recovery during an ECDSA     signature operation. In order to be vulnerable an     attacker would have to have the ability to time the     creation of a large number of signatures where explicit     parameters with no co-factor present are in use by an     application using libcrypto. For the avoidance of doubt     libssl is not vulnerable because explicit parameters     are never used. Fixed in OpenSSL 1.1.1d (Affected     1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected     1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected     1.0.2-1.0.2s).(CVE-2019-1547)

  - In situations where an attacker receives automated     notification of the success or failure of a decryption     attempt an attacker, after sending a very large number     of messages to be decrypted, can recover a CMS/PKCS7     transported encryption key or decrypt any RSA encrypted     message that was encrypted with the public RSA key,     using a Bleichenbacher padding oracle attack.
    Applications are not affected if they use a certificate     together with the private RSA key to the CMS_decrypt or     PKCS7_decrypt functions to select the correct recipient     info to decrypt. Fixed in OpenSSL 1.1.1d (Affected     1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected     1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected     1.0.2-1.0.2s).(CVE-2019-1563)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openssl fixes the following issues :

CVE-2018-0732: Reject excessively large primes in DH key generation (bsc#1097158)

CVE-2018-0734: Timing vulnerability in DSA signature generation (bsc#1113652)

CVE-2018-0737: Cache timing vulnerability in RSA Key Generation (bsc#1089039)

CVE-2018-5407: Elliptic curve scalar multiplication timing attack defenses (fixes 'PortSmash') (bsc#1113534)

CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080)

Fix One&Done side-channel attack on RSA (bsc#1104789)

Reject invalid EC point coordinates (bsc#1131291)

The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations (bsc#1117951)

Add missing error string to CVE-2016-8610 fix (bsc#1110018#c9)

blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)

Non security fixes: correct the error detection in the fips patch (bsc#1106197)

Add openssl(cli) Provide so the packages that require the openssl binary can require this instead of the new openssl meta package (bsc#1101470)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has ovmf packages installed that are affected by multiple vulnerabilities:

  - Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable     escalation of privilege and/or denial of service via network access. (CVE-2019-0160)

  - Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially     enable an escalation of privilege via local access. (CVE-2017-5731)

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA     pool that was not assigned to any issues during 2017. Notes: none (CVE-2017-5732, CVE-2017-5733,     CVE-2017-5735)

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn     by its CNA. Notes: none (CVE-2017-5734)

  - Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of     service or elevation of privilege via local access. (CVE-2018-12181)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has ovmf packages installed that are affected by multiple vulnerabilities:

  - Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable     escalation of privilege and/or denial of service via network access. (CVE-2019-0160)

  - Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially     enable an escalation of privilege via local access. (CVE-2017-5731)

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA     pool that was not assigned to any issues during 2017. Notes: none (CVE-2017-5732, CVE-2017-5733,     CVE-2017-5735)

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn     by its CNA. Notes: none (CVE-2017-5734)

  - Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of     service or elevation of privilege via local access. (CVE-2018-12181)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
125147	Oracle Enterprise Manager Ops Center (Apr 2019 CPU)	Nessus	Misc.	2019/5/15	2023/4/25	critical
128197	EulerOS 2.0 SP8 : compat-openssl10 (EulerOS-SA-2019-1828)	Nessus	Huawei Local Security Checks	2019/8/27	2024/5/1	medium
131584	EulerOS 2.0 SP2 : openssl110f (EulerOS-SA-2019-2430)	Nessus	Huawei Local Security Checks	2019/12/4	2022/5/18	medium
126046	SUSE SLES12 Security Update : openssl (SUSE-SU-2019:1553-1)	Nessus	SuSE Local Security Checks	2019/6/19	2022/12/5	medium
131425	NewStart CGSL CORE 5.04 / MAIN 5.04 : ovmf Multiple Vulnerabilities (NS-SA-2019-0218)	Nessus	NewStart CGSL Local Security Checks	2019/12/2	2025/8/29	critical
132479	NewStart CGSL CORE 5.05 / MAIN 5.05 : ovmf Multiple Vulnerabilities (NS-SA-2019-0239)	Nessus	NewStart CGSL Local Security Checks	2019/12/31	2025/8/29	critical
154459	NewStart CGSL CORE 5.05 / MAIN 5.05 : ovmf Multiple Vulnerabilities (NS-SA-2021-0180)	Nessus	NewStart CGSL Local Security Checks	2021/10/27	2025/8/29	critical

检测

插件搜索

critical

medium

medium

medium

critical

critical

critical