New openssl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-685:04 advisory.

    The OpenSSL toolkit provides support for secure communications between     machines. OpenSSL includes a certificate management tool and shared     libraries which provide various cryptographic algorithms and     protocols.
    Security issues fixed with this release:
    CVE-2016-2177     OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for     heap-buffer boundary checks, which might allow remote attackers to     cause a denial of service (integer overflow and application crash) or     possibly have unspecified other impact by leveraging unexpected malloc     behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.
    CVE-2016-2178     The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL     through 1.0.2h does not properly ensure the use of constant-time     operations, which makes it easier for local users to discover a DSA     private key via a timing side-channel attack.
    CVE-2016-2179     The DTLS implementation in OpenSSL before 1.1.0 does not properly     restrict the lifetime of queue entries associated with unused     out-of-order messages, which allows remote attackers to cause a denial     of service (memory consumption) by maintaining many crafted DTLS     sessions simultaneously, related to d1_lib.c, statem_dtls.c,     statem_lib.c, and statem_srvr.c.
    CVE-2016-2180     The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509     Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in     OpenSSL through 1.0.2h allows remote attackers to cause a denial of     service (out-of-bounds read and application crash) via a crafted     time-stamp file that is mishandled by the openssl ts command.
    CVE-2016-2181     The Anti-Replay feature in the DTLS implementation in OpenSSL before     1.1.0 mishandles early use of a new epoch number in conjunction with a     large sequence number, which allows remote attackers to cause a denial     of service (false-positive packet drops) via spoofed DTLS records,     related to rec_layer_d1.c and ssl3_record.c.
    CVE-2016-2182     The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0     does not properly validate division results, which allows remote     attackers to cause a denial of service (out-of-bounds write and     application crash) or possibly have unspecified other impact via     unknown vectors.
    CVE-2016-6302     The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before     1.1.0 does not consider the HMAC size during validation of the ticket     length, which allows remote attackers to cause a denial of service via     a ticket that is too short.
    CVE-2016-6304     Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2     before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause     a denial of service (memory consumption) via large OCSP Status Request     extensions.
    CVE-2016-6306     The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before     1.0.2i might allow remote attackers to cause a denial of service     (out-of-bounds read) via crafted certificate operations, related to     s3_clnt.c and s3_srvr.c.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3621 advisory.

    - fix CVE-2016-2177 - possible integer overflow
    - fix CVE-2016-2178 - non-constant time DSA operations
    - fix CVE-2016-2179 - further DoS issues in DTLS
    - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
    - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
    - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
    - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
    - fix CVE-2016-6304 - unbound memory growth with OCSP status request
    - fix CVE-2016-6306 - certificate message OOB reads
    - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to       112 bit effective strength
    - fix CVE-2016-2105 - possible overflow in base64 encoding
    - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
    - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
    - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
    - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
    - fix CVE-2016-0799 - memory issues in BIO_printf
    - fix CVE-2016-0702 - side channel attack on modular exponentiation
    - fix CVE-2016-0705 - double-free in DSA private key parsing
    - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn
    - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
    - fix CVE-2015-7575 - disallow use of MD5 in TLS1.2
    - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
    - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
    - fix CVE-2015-3196 - race condition when handling PSK identity hint
    - fix regression caused by mistake in fix for CVE-2015-1791
    - improved fix for CVE-2015-1791
    - add missing parts of CVE-2015-0209 fix for corectness although unexploitable
    - fix CVE-2014-8176 - invalid free in DTLS buffering code
    - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
    - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
    - fix CVE-2015-1791 - race condition handling NewSessionTicket
    - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function
    - fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on       read in multithreaded applications
    - fix CVE-2015-4000 - prevent the logjam attack on client - restrict       the DH key size to at least 768 bits (limit will be increased in future)
    - update fix for CVE-2015-0287 to what was released upstream
    - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
    - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
    - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
    - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
    - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
    - fix CVE-2015-0292 - integer underflow in base64 decoder
    - fix CVE-2015-0293 - triggerable assert in SSLv2 server
    - fix CVE-2014-3570 - incorrect computation in BN_sqr()
    - fix CVE-2014-3571 - possible crash in dtls1_get_record()
    - fix CVE-2014-3572 - possible downgrade of ECDH ciphersuite to non-PFS state
    - fix CVE-2014-8275 - various certificate fingerprint issues
    - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export       ciphersuites and on server
    - fix CVE-2015-0205 - do not allow unauthenticated client DH certificate
    - fix CVE-2015-0206 - possible memory leak when buffering DTLS records
    - fix CVE-2014-3567 - memory leak when handling session tickets
    - fix CVE-2014-3513 - memory leak in srtp support
    - add support for fallback SCSV to partially mitigate CVE-2014-3566       (padding attack on SSL3)
    - fix CVE-2014-3505 - doublefree in DTLS packet processing
    - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
    - fix CVE-2014-3507 - avoid memory leak in DTLS
    - fix CVE-2014-3508 - fix OID handling to avoid information leak
    - fix CVE-2014-3509 - fix race condition when parsing server hello
    - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
    - fix CVE-2014-3511 - disallow protocol downgrade via fragmentation
    - fix CVE-2014-0224 fix that broke EAP-FAST session resumption support
    - fix CVE-2010-5298 - possible use of memory after free
    - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment
    - fix CVE-2014-0198 - possible NULL pointer dereference
    - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet
    - fix CVE-2014-0224 - SSL/TLS MITM vulnerability
    - fix CVE-2014-3470 - client-side DoS when using anonymous ECDH
    - fix CVE-2014-0160 - information disclosure in TLS heartbeat extension
    - fix CVE-2013-4353 - Invalid TLS handshake crash
    - fix CVE-2013-6450 - possible MiTM attack on DTLS1
    - fix CVE-2013-6449 - crash when version in SSL structure is incorrect
    - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
    - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
    - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB       environment variable is set (fixes CVE-2012-4929 #857051)
    - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
    - properly initialize tkeylen in the CVE-2012-0884 fix
    - fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)
    - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
    - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)
    - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery       vulnerability and additional DTLS fixes (#771770)
    - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
    - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
    - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)
    - initialize the X509_STORE_CTX properly for CRL lookups - CVE-2011-3207       (#736087)
    - fix OCSP stapling vulnerability - CVE-2011-0014 (#676063)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3087-1 advisory.

    Shi Lei discovered that OpenSSL incorrectly handled the OCSP Status Request extension. A remote attacker     could possibly use this issue to cause memory consumption, resulting in a denial of service.
    (CVE-2016-6304)

    Guido Vranken discovered that OpenSSL used undefined behaviour when performing pointer arithmetic. A     remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service.
    This issue has only been addressed in Ubuntu 16.04 LTS in this update. (CVE-2016-2177)

    Csar Pereida, Billy Brumley, and Yuval Yarom discovered that OpenSSL did not properly use constant-time     operations when performing DSA signing. A remote attacker could possibly use this issue to perform a     cache-timing attack and recover private DSA keys. (CVE-2016-2178)

    Quan Luo discovered that OpenSSL did not properly restrict the lifetime of queue entries in the DTLS     implementation. A remote attacker could possibly use this issue to consume memory, resulting in a denial     of service. (CVE-2016-2179)

    Shi Lei discovered that OpenSSL incorrectly handled memory in the TS_OBJ_print_bio() function. A remote     attacker could possibly use this issue to cause a denial of service. (CVE-2016-2180)

    It was discovered that the OpenSSL incorrectly handled the DTLS anti-replay feature. A remote attacker     could possibly use this issue to cause a denial of service. (CVE-2016-2181)

    Shi Lei discovered that OpenSSL incorrectly validated division results. A remote attacker could possibly     use this issue to cause a denial of service. (CVE-2016-2182)

    Karthik Bhargavan and Gaetan Leurent discovered that the DES and Triple DES ciphers were vulnerable to     birthday attacks. A remote attacker could possibly use this flaw to obtain clear text data from long     encrypted sessions. This update moves DES from the HIGH cipher list to MEDIUM. (CVE-2016-2183)

    Shi Lei discovered that OpenSSL incorrectly handled certain ticket lengths. A remote attacker could use     this issue to cause a denial of service. (CVE-2016-6302)

    Shi Lei discovered that OpenSSL incorrectly handled memory in the MDC2_Update() function. A remote     attacker could possibly use this issue to cause a denial of service. (CVE-2016-6303)

    Shi Lei discovered that OpenSSL incorrectly performed certain message length checks. A remote attacker     could possibly use this issue to cause a denial of service. (CVE-2016-6306)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Update from upstream with multiple security issues fixed.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openssl fixes the following issues :

OpenSSL Security Advisory [22 Sep 2016] (boo#999665)

Severity: High

  - OCSP Status Request extension unbounded memory growth     (CVE-2016-6304) (boo#999666)

Severity: Low

  - Pointer arithmetic undefined behaviour (CVE-2016-2177)     (boo#982575)

  - Constant time flag not preserved in DSA signing     (CVE-2016-2178) (boo#983249)

  - DTLS buffered message DoS (CVE-2016-2179) (boo#994844)

  - OOB read in TS_OBJ_print_bio() (CVE-2016-2180)     (boo#990419)

  - DTLS replay protection DoS (CVE-2016-2181) (boo#994749)

  - OOB write in BN_bn2dec() (CVE-2016-2182) (boo#993819)

  - Birthday attack against 64-bit block ciphers (SWEET32)     (CVE-2016-2183) (boo#995359)

  - Malformed SHA512 ticket DoS (CVE-2016-6302) (boo#995324)

  - OOB write in MDC2_Update() (CVE-2016-6303) (boo#995377)

  - Certificate message OOB reads (CVE-2016-6306)     (boo#999668)

More information can be found on https://www.openssl.org/news/secadv/20160922.txt

  - update expired S/MIME certs (boo#979475)

  - allow >= 64GB AESGCM transfers (boo#988591)

  - fix crash in print_notice (boo#998190)

  - resume reading from /dev/urandom when interrupted by a     signal (boo#995075)

This update for openssl fixes the following issues: OpenSSL Security Advisory [22 Sep 2016] (bsc#999665) Severity: High

  - OCSP Status Request extension unbounded memory growth     (CVE-2016-6304) (bsc#999666) Severity: Low

  - Pointer arithmetic undefined behaviour (CVE-2016-2177)     (bsc#982575)

  - Constant time flag not preserved in DSA signing     (CVE-2016-2178) (bsc#983249)

  - DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)

  - OOB read in TS_OBJ_print_bio() (CVE-2016-2180)     (bsc#990419)

  - DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)

  - OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)

  - Birthday attack against 64-bit block ciphers (SWEET32)     (CVE-2016-2183) (bsc#995359)

  - Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)

  - OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)

  - Certificate message OOB reads (CVE-2016-6306)     (bsc#999668) More information can be found on:
    https://www.openssl.org/news/secadv/20160922.txt Also     following bugs were fixed :

  - update expired S/MIME certs (bsc#979475)

  - improve s390x performance (bsc#982745)

  - allow >= 64GB AESGCM transfers (bsc#988591)

  - fix crash in print_notice (bsc#998190)

  - resume reading from /dev/urandom when interrupted by a     signal (bsc#995075)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - A memory leak flaw was found in the way OpenSSL handled     TLS status request extension data during session     renegotiation. A remote attacker could cause a TLS     server using OpenSSL to consume an excessive amount of     memory and, possibly, exit unexpectedly after exhausting     all available memory, if it enabled OCSP stapling     support. (CVE-2016-6304)

  - It was discovered that OpenSSL did not always use     constant time operations when computing Digital     Signature Algorithm (DSA) signatures. A local attacker     could possibly use this flaw to obtain a private DSA key     belonging to another user or service running on the same     system. (CVE-2016-2178)

  - It was discovered that the Datagram TLS (DTLS)     implementation could fail to release memory in certain     cases. A malicious DTLS client could cause a DTLS server     using OpenSSL to consume an excessive amount of memory     and, possibly, exit unexpectedly after exhausting all     available memory. (CVE-2016-2179)

  - A flaw was found in the Datagram TLS (DTLS) replay     protection implementation in OpenSSL. A remote attacker     could possibly use this flaw to make a DTLS server using     OpenSSL to reject further packets sent from a DTLS     client over an established DTLS connection.
    (CVE-2016-2181)

  - An out of bounds write flaw was discovered in the     OpenSSL BN_bn2dec() function. An attacker able to make     an application using OpenSSL to process a large BIGNUM     could cause the application to crash or, possibly,     execute arbitrary code. (CVE-2016-2182)

  - A flaw was found in the DES/3DES cipher was used as part     of the TLS/SSL protocol. A man-in-the-middle attacker     could use this flaw to recover some plaintext data by     capturing large amounts of encrypted traffic between     TLS/SSL server and client if the communication used a     DES/3DES based ciphersuite. (CVE-2016-2183)

This update mitigates the CVE-2016-2183 issue by lowering priority of DES cipher suites so they are not preferred over cipher suites using AES. For compatibility reasons, DES cipher suites remain enabled by default and included in the set of cipher suites identified by the HIGH cipher string. Future updates may move them to MEDIUM or not enable them by default.

  - An integer underflow flaw leading to a buffer over-read     was found in the way OpenSSL parsed TLS session tickets.
    A remote attacker could use this flaw to crash a TLS     server using OpenSSL if it used SHA-512 as HMAC for     session tickets. (CVE-2016-6302)

  - Multiple integer overflow flaws were found in the way     OpenSSL performed pointer arithmetic. A remote attacker     could possibly use these flaws to cause a TLS/SSL server     or client using OpenSSL to crash. (CVE-2016-2177)

  - An out of bounds read flaw was found in the way OpenSSL     formatted Public Key Infrastructure Time-Stamp Protocol     data for printing. An attacker could possibly cause an     application using OpenSSL to crash if it printed time     stamp data from the attacker. (CVE-2016-2180)

  - Multiple out of bounds read flaws were found in the way     OpenSSL handled certain TLS/SSL protocol handshake     messages. A remote attacker could possibly use these     flaws to crash a TLS/SSL server or client using OpenSSL.
    (CVE-2016-6306)

The version of OpenSSL installed on the remote host is prior to 1.0.1u. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.1u advisory.

  - Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a     allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request     extensions. (CVE-2016-6304)

  - The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to     cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c     and s3_srvr.c. (CVE-2016-6306)

  - Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows     remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have     unspecified other impact via unknown vectors. (CVE-2016-6303)

  - The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size     during validation of the ticket length, which allows remote attackers to cause a denial of service via a     ticket that is too short. (CVE-2016-6302)

  - The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries     associated with unused out-of-order messages, which allows remote attackers to cause a denial of service     (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c,     statem_dtls.c, statem_lib.c, and statem_srvr.c. (CVE-2016-2179)

  - The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new     epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial     of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and     ssl3_record.c. (CVE-2016-2181)

  - The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division     results, which allows remote attackers to cause a denial of service (out-of-bounds write and application     crash) or possibly have unspecified other impact via unknown vectors. (CVE-2016-2182)

  - The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp     Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of     service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the     openssl ts command. (CVE-2016-2180)

  - The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure     the use of constant-time operations, which makes it easier for local users to discover a DSA private key     via a timing side-channel attack. (CVE-2016-2178)

  - OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might     allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly     have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c,     and t1_lib.c. (CVE-2016-2177)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of OpenSSL installed on the remote host is prior to 1.0.2i. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2i advisory.

  - Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a     allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request     extensions. (CVE-2016-6304)

  - The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to     cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c     and s3_srvr.c. (CVE-2016-6306)

  - Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows     remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have     unspecified other impact via unknown vectors. (CVE-2016-6303)

  - The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and     products, have a birthday bound of approximately four billion blocks, which makes it easier for remote     attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as     demonstrated by an HTTPS session using Triple DES in CBC mode, aka a Sweet32 attack. (CVE-2016-2183)

  - The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size     during validation of the ticket length, which allows remote attackers to cause a denial of service via a     ticket that is too short. (CVE-2016-6302)

  - The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries     associated with unused out-of-order messages, which allows remote attackers to cause a denial of service     (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c,     statem_dtls.c, statem_lib.c, and statem_srvr.c. (CVE-2016-2179)

  - The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new     epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial     of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and     ssl3_record.c. (CVE-2016-2181)

  - The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division     results, which allows remote attackers to cause a denial of service (out-of-bounds write and application     crash) or possibly have unspecified other impact via unknown vectors. (CVE-2016-2182)

  - The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp     Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of     service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the     openssl ts command. (CVE-2016-2180)

  - The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure     the use of constant-time operations, which makes it easier for local users to discover a DSA private key     via a timing side-channel attack. (CVE-2016-2178)

  - OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might     allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly     have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c,     and t1_lib.c. (CVE-2016-2177)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system. (CVE-2016-2178)

It was discovered that the Datagram TLS (DTLS) implementation could fail to release memory in certain cases. A malicious DTLS client could cause a DTLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory. (CVE-2016-2179)

A flaw was found in the Datagram TLS (DTLS) replay protection implementation in OpenSSL. A remote attacker could possibly use this flaw to make a DTLS server using OpenSSL to reject further packets sent from a DTLS client over an established DTLS connection.
(CVE-2016-2181)

An out of bounds write flaw was discovered in the OpenSSL BN_bn2dec() function. An attacker able to make an application using OpenSSL to process a large BIGNUM could cause the application to crash or, possibly, execute arbitrary code. (CVE-2016-2182)

A flaw was found in the DES/3DES cipher was used as part of the TLS/SSL protocol. A man-in-the-middle attacker could use this flaw to recover some plaintext data by capturing large amounts of encrypted traffic between TLS/SSL server and client if the communication used a DES/3DES based ciphersuite. (CVE-2016-2183)

An integer underflow flaw leading to a buffer over-read was found in the way OpenSSL parsed TLS session tickets. A remote attacker could use this flaw to crash a TLS server using OpenSSL if it used SHA-512 as HMAC for session tickets. (CVE-2016-6302)

Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2016-2177)

An out of bounds read flaw was found in the way OpenSSL formatted Public Key Infrastructure Time-Stamp Protocol data for printing. An attacker could possibly cause an application using OpenSSL to crash if it printed time stamp data from the attacker. (CVE-2016-2180)

Multiple out of bounds read flaws were found in the way OpenSSL handled certain TLS/SSL protocol handshake messages. A remote attacker could possibly use these flaws to crash a TLS/SSL server or client using OpenSSL. (CVE-2016-6306)

This update mitigates the CVE-2016-2183 issue by lowering priority of DES cipher suites so they are not preferred over cipher suites using AES. For compatibility reasons, DES cipher suites remain enabled by default and included in the set of cipher suites identified by the HIGH cipher string. Future updates may move them to MEDIUM or not enable them by default.

The version of Tenable Passive Vulnerability Scanner (PVS) installed on the remote host is 5.x < 5.2.0. It is, therefore, affected by multiple vulnerabilities :

  - Multiple denial of service vulnerabilities exist in     Expat within file xmlparse.c due to a logical error in     hash computations. An unauthenticated, remote attacker     can exploit these, via a specially crafted XML file     containing many identifiers with the same value, to     cause the service to exhaust CPU resources.
    (CVE-2012-0876, CVE-2016-5300)

  - A flaw exists in the generate_hash_secret_salt()     function in file lib/xmlparse.c within Expat due to the     generation of non-random output by the PRNG. An     unauthenticated, remote attacker can exploit this to     more easily predict the PRNG output. (CVE-2012-6702)

  - Multiple buffer overflow conditions exist within Expat,     specifically in the XML_GetBuffer() function in file     lib/xmlparse.c, due to improper validation of     user-supplied input when handling compressed XML     content. An unauthenticated, remote attacker can exploit     these to execute arbitrary code. (CVE-2015-1283,     CVE-2016-4472)

  - Multiple buffer overflow conditions exist within the     Expat XML parser when handling malformed input documents     due to improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit these to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2016-0718, CVE-2016-0719)

  - Multiple integer overflow conditions exist in s3_srvr.c,     ssl_sess.c, and t1_lib.c due to improper use of pointer     arithmetic for heap-buffer boundary checks. An     unauthenticated, remote attacker can exploit these to     cause a denial of service. (CVE-2016-2177)

  - An information disclosure vulnerability exists in the     dsa_sign_setup() function in dsa_ossl.c due to a failure     to properly ensure the use of constant-time operations.
    An unauthenticated, remote attacker can exploit this,     via a timing side-channel attack, to disclose DSA key     information. (CVE-2016-2178)

  - A denial of service vulnerability exists in the DTLS     implementation due to a failure to properly restrict the     lifetime of queue entries associated with unused     out-of-order messages. An unauthenticated, remote     attacker can exploit this, by maintaining multiple     crafted DTLS sessions simultaneously, to exhaust memory.
    (CVE-2016-2179)

  - An out-of-bounds read error exists in the X.509 Public     Key Infrastructure Time-Stamp Protocol (TSP)     implementation. An unauthenticated, remote attacker can     exploit this, via a crafted time-stamp file that is     mishandled by the 'openssl ts' command, to cause     denial of service or to disclose sensitive information.
    (CVE-2016-2180)

  - A denial of service vulnerability exists in the     Anti-Replay feature in the DTLS implementation due to     improper handling of epoch sequence numbers in records.
    An unauthenticated, remote attacker can exploit this,     via spoofed DTLS records, to cause legitimate packets to     be dropped. (CVE-2016-2181)

  - An overflow condition exists in the BN_bn2dec() function     in bn_print.c due to improper validation of     user-supplied input when handling BIGNUM values. An     unauthenticated, remote attacker can exploit this to     crash the process. (CVE-2016-2182)

  - A vulnerability exists, known as SWEET32, in the 3DES     and Blowfish algorithms due to the use of weak 64-bit     block ciphers by default. A man-in-the-middle attacker     who has sufficient resources can exploit this     vulnerability, via a 'birthday' attack, to detect a     collision that leaks the XOR between the fixed secret     and a known plaintext, allowing the disclosure of the     secret text, such as secure HTTPS cookies, and possibly     resulting in the hijacking of an authenticated session.
    (CVE-2016-2183)

  - A flaw exists in SQLite due to the use of insecure     temporary directories. A local attacker can exploit this     to cause a denial of service condition or possibly have     other more severe impact. (CVE-2016-6153)

  - A flaw exists in the tls_decrypt_ticket() function in     t1_lib.c due to improper handling of ticket HMAC     digests. An unauthenticated, remote attacker can exploit     this, via a ticket that is too short, to crash the     process, resulting in a denial of service.
    (CVE-2016-6302)

  - An integer overflow condition exists in the     MDC2_Update() function in mdc2dgst.c due to improper     validation of user-supplied input. An unauthenticated,     remote attacker can exploit this to cause a heap-based     buffer overflow, resulting in a denial of service     condition or possibly the execution of arbitrary code.
    (CVE-2016-6303)

  - A flaw exists in the ssl_parse_clienthello_tlsext()     function in t1_lib.c due to improper handling of overly     large OCSP Status Request extensions from clients. An     unauthenticated, remote attacker can exploit this, via     large OCSP Status Request extensions, to exhaust memory     resources, resulting in a denial of service condition.
    (CVE-2016-6304)

  - A flaw exists in the SSL_peek() function in     rec_layer_s3.c due to improper handling of empty     records. An unauthenticated, remote attacker can exploit     this, by triggering a zero-length record in an SSL_peek     call, to cause an infinite loop, resulting in a denial     of service condition. (CVE-2016-6305)

  - An out-of-bounds read error exists in the certificate     parser that allows an unauthenticated, remote attacker     to cause a denial of service via crafted certificate     operations. (CVE-2016-6306)

  - A denial of service vulnerability exists in the     state-machine implementation due to a failure to check     for an excessive length before allocating memory. An     unauthenticated, remote attacker can exploit this, via a     crafted TLS message, to exhaust memory resources.
    (CVE-2016-6307)

  - A denial of service vulnerability exists in the DTLS     implementation due to improper handling of excessively     long DTLS messages. An unauthenticated, remote attacker     can exploit this, via a crafted DTLS message, to exhaust     available memory resources. (CVE-2016-6308)

  - A remote code execution vulnerability exists in the     read_state_machine() function in statem.c due to     improper handling of messages larger than 16k. An     unauthenticated, remote attacker can exploit this, via a     specially crafted message, to cause a use-after-free     error, resulting in a denial of service condition or     possibly the execution of arbitrary code.
    (CVE-2016-6309)

  - A cross-site scripting (XSS) vulnerability exists within     the JQuery UI dialog() function due to improper     validation of input to the 'closeText' parameter before     returning it to users. An unauthenticated, remote     attacker can exploit this, via a specially crafted     request, to execute arbitrary script code in a user's     browser session. (CVE-2016-7103)

  - A denial of service vulnerability exists in x509_vfy.c     due to improper handling of certificate revocation lists     (CRLs). An unauthenticated, remote attacker can exploit     this, via a specially crafted CRL, to cause a NULL     pointer dereference, resulting in a crash of the     service. (CVE-2016-7052)

  - An unspecified cross-site scripting (XSS) vulnerability     exists in the web interface due to improper validation     of input before returning it to users. An     unauthenticated, remote attacker can exploit this, via a     specially crafted request, to execute arbitrary script     code in a user's browser session.

ID	名稱	產品	系列	已發布	已更新	嚴重性
93663	Slackware 14.0 / 14.1 / 14.2 / current : openssl (SSA:2016-266-01)	Nessus	Slackware Local Security Checks	2016/9/23	2026/1/23	critical
289904	MiracleLinux 7 : openssl-1.0.1e-51.el7.7 (AXSA:2016-685:04)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical
181069	Oracle Linux 6 / 7 : openssl (ELSA-2016-3621)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2026/2/9	critical
93684	Ubuntu 14.04 LTS / 16.04 LTS : OpenSSL vulnerabilities (USN-3087-1)	Nessus	Ubuntu Local Security Checks	2016/9/23	2024/8/27	critical
93752	Fedora 24 : 1:openssl (2016-a555159613)	Nessus	Fedora Local Security Checks	2016/9/28	2026/1/23	critical
93756	openSUSE Security Update : openssl (openSUSE-2016-1130)	Nessus	SuSE Local Security Checks	2016/9/28	2026/1/23	critical
93765	SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2016:2394-1)	Nessus	SuSE Local Security Checks	2016/9/28	2026/1/23	critical
93795	Scientific Linux Security Update : openssl on SL6.x, SL7.x i386/x86_64 (20160927)	Nessus	Scientific Linux Local Security Checks	2016/9/29	2026/1/22	critical
93814	OpenSSL 1.0.1 < 1.0.1u Multiple Vulnerabilities	Nessus	Web Servers	2016/9/30	2024/10/23	critical
93815	OpenSSL 1.0.2 < 1.0.2i Multiple Vulnerabilities	Nessus	Web Servers	2016/9/30	2024/10/23	critical
94021	Amazon Linux AMI : openssl (ALAS-2016-755)	Nessus	Amazon Linux Local Security Checks	2016/10/13	2026/1/22	critical
96337	Tenable Passive Vulnerability Scanner 5.x < 5.2.0 Multiple Vulnerabilities (SWEET32)	Nessus	Misc.	2017/1/6	2026/1/6	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical