The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:0619 advisory.

    Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection     over an encrypted connection (encrypted using SSL or TLS) or to provide an encrypted means of connecting     to services that do not natively support encryption.

    Security Fix(es):

    * stunnel: client certificate not correctly verified when redirect and verifyChain options are used     (CVE-2021-20230)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the stunnel package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A flaw was found in stunnel before 5.57, where it     improperly validates client certificates when it is     configured to use both redirect and verifyChain     options. This flaw allows an attacker with a     certificate signed by a Certificate Authority, which is     not the one accepted by the stunnel server, to access     the tunneled service instead of being redirected to the     address specified in the redirect option. The highest     threat from this vulnerability is to     confidentiality.(CVE-2021-20230)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for stunnel fixes the following issues :

Security fix: [bsc#1177580, bsc#1182529, CVE-2021-20230]

  - 'redirect' option does not properly handle 'verifyChain     = yes'

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0011 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-20230:
    A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is     configured to use both redirect and verifyChain options. This flaw allows an attacker with a certificate     signed by a Certificate Authority, which is not the one accepted by the stunnel server, to access the     tunneled service instead of being redirected to the address specified in the redirect option. The highest     threat from this vulnerability is to confidentiality.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0220 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2021-20230:
      A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is     configured to use both redirect and verifyChain options. This flaw allows an attacker with a certificate     signed by a Certificate Authority, which is not the one accepted by the stunnel server, to access the     tunneled service instead of being redirected to the address specified in the redirect option. The highest     threat from this vulnerability is to confidentiality.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
149507	RHEL 8 : stunnel (RHSA-2021:0619)	Nessus	Red Hat Local Security Checks	2021/5/14	2024/11/7	high
149591	EulerOS 2.0 SP8 : stunnel (EulerOS-SA-2021-1889)	Nessus	Huawei Local Security Checks	2021/5/18	2024/1/1	high
149248	SUSE SLES15 Security Update : stunnel (SUSE-SU-2021:1465-1)	Nessus	SuSE Local Security Checks	2021/5/4	2024/1/2	high
236598	Alibaba Cloud Linux 3 : 0011: stunnel (ALINUX3-SA-2021:0011)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
238764	TencentOS Server 3: stunnel (TSSA-2022:0220)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high

偵測

搜尋 Plugin

high

high

high

high

high