This update for openssl-1_1 fixes the following issues :

&#9; - CVE-2020-1971: Fixed a NULL pointer dereference in EDIPARTYNAME (bsc#1179491).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5476 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Reject certificates with explicit EC parameters in strict mode (BZ#1891541)

    * Add FIPS selftest for HKDF, SSKDF, SSHKDF, and TLS12PRF; add DH_compute_key KAT to DH selftest     (BZ#1891542)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5640 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The X.509 GeneralName type is a generic type for     representing different types of names. One of those     name types is known as EDIPartyName. OpenSSL provides a     function GENERAL_NAME_cmp which compares different     instances of a GENERAL_NAME to see if they are equal or     not. This function behaves incorrectly when both     GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer     dereference and a crash may occur leading to a possible     denial of service attack. OpenSSL itself uses the     GENERAL_NAME_cmp function for two purposes: 1)     Comparing CRL distribution point names between an     available CRL and a CRL distribution point embedded in     an X509 certificate 2) When verifying that a timestamp     response token signer matches the timestamp authority     name (exposed via the API functions     TS_RESP_verify_response and TS_RESP_verify_token) If an     attacker can control both items being compared then     that attacker could trigger a crash. For example if the     attacker can trick a client or server into checking a     malicious certificate against a malicious CRL then this     may occur. Note that some applications automatically     download CRLs based on a URL embedded in a certificate.
    This checking happens prior to the signatures on the     certificate and CRL being verified. OpenSSL's s_server,     s_client and verify tools have support for the     '-crl_download' option which implements automatic CRL     downloading and this attack has been demonstrated to     work against those tools. Note that an unrelated bug     means that affected versions of OpenSSL cannot parse or     construct correct encodings of EDIPARTYNAME. However it     is possible to construct a malformed EDIPARTYNAME that     OpenSSL's parser will accept and hence trigger this     attack. All OpenSSL 1.1.1 and 1.0.2 versions are     affected by this issue. Other OpenSSL releases are out     of support and have not been checked. Fixed in OpenSSL     1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x     (Affected 1.0.2-1.0.2w).(CVE-2020-1971)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0486 advisory.

    This release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss     Core Services offering.

    This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service     Pack 5 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most     significant bug fixes and enhancements included in this release.

    Security fix(es):

    * openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has openssl packages installed that are affected by multiple vulnerabilities:

  - There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit     moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime     RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed     likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have     to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low     level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected     1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t). (CVE-2019-1551)

  - The X.509 GeneralName type is a generic type for representing different types of names. One of those name     types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different     instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both     GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a     possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1)     Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in     an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp     authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an     attacker can control both items being compared then that attacker could trigger a crash. For example if     the attacker can trick a client or server into checking a malicious certificate against a malicious CRL     then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a     certificate. This checking happens prior to the signatures on the certificate and CRL being verified.
    OpenSSL's s_server, s_client and verify tools have support for the -crl_download option which implements     automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an     unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of     EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will     accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue.
    Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected     1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w). (CVE-2020-1971)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - The X.509 GeneralName type is a generic type for     representing different types of names. One of those     name types is known as EDIPartyName. OpenSSL provides a     function GENERAL_NAME_cmp which compares different     instances of a GENERAL_NAME to see if they are equal or     not. This function behaves incorrectly when both     GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer     dereference and a crash may occur leading to a possible     denial of service attack. OpenSSL itself uses the     GENERAL_NAME_cmp function for two purposes: 1)     Comparing CRL distribution point names between an     available CRL and a CRL distribution point embedded in     an X509 certificate 2) When verifying that a timestamp     response token signer matches the timestamp authority     name (exposed via the API functions     TS_RESP_verify_response and TS_RESP_verify_token) If an     attacker can control both items being compared then     that attacker could trigger a crash. For example if the     attacker can trick a client or server into checking a     malicious certificate against a malicious CRL then this     may occur. Note that some applications automatically     download CRLs based on a URL embedded in a certificate.
    This checking happens prior to the signatures on the     certificate and CRL being verified. OpenSSL's s_server,     s_client and verify tools have support for the     '-crl_download' option which implements automatic CRL     downloading and this attack has been demonstrated to     work against those tools. Note that an unrelated bug     means that affected versions of OpenSSL cannot parse or     construct correct encodings of EDIPARTYNAME. However it     is possible to construct a malformed EDIPARTYNAME that     OpenSSL's parser will accept and hence trigger this     attack. All OpenSSL 1.1.1 and 1.0.2 versions are     affected by this issue. Other OpenSSL releases are out     of support and have not been checked. Fixed in OpenSSL     1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x     (Affected 1.0.2-1.0.2w).(CVE-2020-1971)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote OracleVM system is missing necessary patches to address security updates:

  - The X.509 GeneralName type is a generic type for representing different types of names. One of those name     types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different     instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both     GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a     possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1)     Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in     an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp     authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an     attacker can control both items being compared then that attacker could trigger a crash. For example if     the attacker can trick a client or server into checking a malicious certificate against a malicious CRL     then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a     certificate. This checking happens prior to the signatures on the certificate and CRL being verified.
    OpenSSL's s_server, s_client and verify tools have support for the -crl_download option which implements     automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an     unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of     EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will     accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue.
    Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected     1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w). (CVE-2020-1971)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0056 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the mysql package has been released.

The version of AOS installed on the remote host is prior to 5.19.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.19.1 advisory.

  - In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length     checks. In cases where the application calling the library did not perform a sanity check on the inputs it     could result in a crash due to a buffer overflow. (CVE-2019-17006)

  - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVE-2019-5482)

  - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives.
    When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may     contain files with permissions the attacker did not have or in paths he did not have access to. Extracting     those archives from a high-privilege user without carefully reviewing them may lead to the compromise of     the system. (CVE-2019-14866)

  - If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to     8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the     HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP     headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This     could lead to users seeing responses for unexpected resources. (CVE-2020-13943)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2974)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0640 advisory.

    This advisory aggregates security fixes for the openssl SRPM in CIQ FIPS 8.10 Compliant. It addresses 27     CVEs: CVE-2006-4343, CVE-2007-3108, CVE-2022-4304, CVE-2023-0215, CVE-2006-2940, and 22 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0127 advisory.

    This advisory aggregates security fixes for the openssl SRPM in CIQ LTS 8.6. It addresses 52 CVEs:
    CVE-2010-0742, CVE-2023-0215, CVE-2015-0286, CVE-2020-25659, CVE-2006-3738, and 47 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.06, has openssl packages installed that are affected by multiple vulnerabilities:

  - In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances     where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection     were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other     places in the script where the file names of certificates being hashed were possibly passed to a command     executed through the shell. This script is distributed by some operating systems in a manner where it is     automatically executed. On such operating systems, an attacker could execute arbitrary commands with the     privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the     OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in     OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze). (CVE-2022-2068)

  - The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat     Extension packets, which allows remote attackers to obtain sensitive information from process memory via     crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to     d1_both.c and t1_lib.c, aka the Heartbleed bug. (CVE-2014-0160)

  - OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service     (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled     error condition. (CVE-2006-2937)

  - OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial     of service (CPU consumption) via parasitic public keys with large (1) public exponent or (2) public     modulus values in X.509 certificates that require extra time to process when using RSA signature     verification. (CVE-2006-2940)

  - Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before     0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of     ciphers. (CVE-2006-3738)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
144317	openSUSE Security Update : openssl-1_1 (openSUSE-2020-2223)	Nessus	SuSE Local Security Checks	2020/12/16	2024/2/1	medium
144380	RHEL 8 : openssl (RHSA-2020:5476)	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	medium
144506	RHEL 7 : openssl (RHSA-2020:5640)	Nessus	Red Hat Local Security Checks	2020/12/21	2024/11/7	medium
145130	EulerOS 2.0 SP3 : openssl (EulerOS-SA-2021-1104)	Nessus	Huawei Local Security Checks	2021/1/20	2024/1/29	medium
146434	RHEL 7 : Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 (RHSA-2021:0486)	Nessus	Red Hat Local Security Checks	2021/2/11	2024/11/7	medium
147241	NewStart CGSL MAIN 6.02 : openssl Multiple Vulnerabilities (NS-SA-2021-0086)	Nessus	NewStart CGSL Local Security Checks	2021/3/10	2022/12/5	medium
147668	EulerOS Virtualization 2.9.0 : openssl (EulerOS-SA-2021-1637)	Nessus	Huawei Local Security Checks	2021/3/11	2024/1/10	medium
150475	OracleVM 3.4 : openssl (OVMSA-2021-0011)	Nessus	OracleVM Local Security Checks	2021/6/10	2023/12/27	medium
155786	RHEL 6 : openssl (RHSA-2021:0056)	Nessus	Red Hat Local Security Checks	2021/12/2	2024/11/7	medium
148357	Photon OS 4.0: Mysql PHSA-2021-4.0-0007	Nessus	PhotonOS Local Security Checks	2021/4/7	2026/11/2	critical
164584	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.1)	Nessus	Misc.	2022/9/1	2025/7/22	critical
354263	Rocky Linux 8 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (ciqsa-2026_0640)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
354509	Rocky Linux 8.6 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (ciqsa-2026_0127)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/13	high
266257	NewStart CGSL MAIN 6.06 : openssl Multiple Vulnerabilities (NS-SA-2025-0211)	Nessus	NewStart CGSL Local Security Checks	2025/9/30	2026/1/21	high

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

critical

critical

high

high

high