The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2914-1 advisory.

    Yuval Yarom, Daniel Genkin, and Nadia Heninger discovered that OpenSSL was vulnerable to a side-channel     attack on modular exponentiation. On certain CPUs, a local attacker could possibly use this issue to     recover RSA keys. This flaw is known as CacheBleed. (CVE-2016-0702)

    Adam Langley discovered that OpenSSL incorrectly handled memory when parsing DSA private keys. A remote     attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly     execute arbitrary code. (CVE-2016-0705)

    Guido Vranken discovered that OpenSSL incorrectly handled hex digit calculation in the BN_hex2bn function.
    A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service, or     possibly execute arbitrary code. (CVE-2016-0797)

    Emilia Ksper discovered that OpenSSL incorrectly handled memory when performing SRP user database     lookups. A remote attacker could possibly use this issue to cause OpenSSL to consume memory, resulting in     a denial of service. (CVE-2016-0798)

    Guido Vranken discovered that OpenSSL incorrectly handled memory when printing very long strings. A remote     attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly     execute arbitrary code. (CVE-2016-0799)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for nodejs to version 4.4.5 fixes the several issues.

These security issues introduced by the bundled openssl were fixed by going to version 1.0.2h :

  - CVE-2016-2107: The AES-NI implementation in OpenSSL did     not consider memory allocation during a certain padding     check, which allowed remote attackers to obtain     sensitive cleartext information via a padding-oracle     attack against an AES CBC session (bsc#977616).

  - CVE-2016-2105: Integer overflow in the EVP_EncodeUpdate     function in crypto/evp/encode.c in OpenSSL allowed     remote attackers to cause a denial of service (heap     memory corruption) via a large amount of binary data     (bsc#977614).

  - CVE-2016-0705: Double free vulnerability in the     dsa_priv_decode function in crypto/dsa/dsa_ameth.c in     OpenSSL allowed remote attackers to cause a denial of     service (memory corruption) or possibly have unspecified     other impact via a malformed DSA private key     (bsc#968047).

  - CVE-2016-0797: Multiple integer overflows in OpenSSL     allowed remote attackers to cause a denial of service     (heap memory corruption or NULL pointer dereference) or     possibly have unspecified other impact via a long digit     string that is mishandled by the (1) BN_dec2bn or (2)     BN_hex2bn function, related to crypto/bn/bn.h and     crypto/bn/bn_print.c (bsc#968048).

  - CVE-2016-0702: The MOD_EXP_CTIME_COPY_FROM_PREBUF     function in crypto/bn/bn_exp.c in OpenSSL did not     properly consider cache-bank access times during modular     exponentiation, which made it easier for local users to     discover RSA keys by running a crafted application on     the same Intel Sandy Bridge CPU core as a victim and     leveraging cache-bank conflicts, aka a 'CacheBleed'     attack (bsc#968050).

These non-security issues were fixed :

  - Fix faulty 'if' condition (string cannot equal a     boolean).

  - buffer: Buffer no longer errors if you call lastIndexOf     with a search term longer than the buffer.

  - contextify: Context objects are now properly garbage     collected, this solves a problem some individuals were     experiencing with extreme memory growth.

  - Update npm to 2.15.5.

- http: Invalid status codes can no longer be sent. Limited to 3 digit numbers between 100 - 999.

  - deps: Fix --gdbjit for embedders. Backported from v8     upstream.

  - querystring: Restore throw when attempting to stringify     bad surrogate pair.

- https: Under certain conditions SSL sockets may have been causing a memory leak when keepalive is enabled. This is no longer the case.

  - lib: The way that we were internally passing arguments     was causing a potential leak. By copying the arguments     into an array we can avoid this.

  - repl: Previously if you were using the repl in strict     mode the column number would be wrong in a stack trace.
    This is no longer an issue.

  - deps: An update to v8 that introduces a new flag
    --perf_basic_prof_only_functions.

- http: A new feature in http(s) agent that catches errors on keep alived connections.

  - src: Better support for big-endian systems.

  - tls: A new feature that allows you to pass common SSL     options to tls.createSecurePair.

  - build: Support python path that includes spaces.

- https: A potential fix for #3692   (HTTP/HTTPS client requests throwing EPROTO).

  - installer: More readable profiling information from     isolate tick logs.

  - process: Add support for symbols in event emitters     (symbols didn't exist when it was written).

  - querystring: querystring.parse() is now 13-22% faster!

  - streams: Performance improvements for moving small     buffers that shows a 5% throughput gain. IoT projects     have been seen to be as much as 10% faster with this     change!

Update to latest openssl which fixes various CVE's

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New openssl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues.

This update for openssl fixes the following issues :

Security issues fixed :

  - CVE-2016-0800 aka the 'DROWN' attack (bsc#968046):
    OpenSSL was vulnerable to a cross-protocol attack that     could lead to decryption of TLS sessions by using a     server supporting SSLv2 and EXPORT cipher suites as a     Bleichenbacher RSA padding oracle.

    This update changes the openssl library to :

  - Disable SSLv2 protocol support by default.

    This can be overridden by setting the environment     variable 'OPENSSL_ALLOW_SSL2' or by using     SSL_CTX_clear_options using the SSL_OP_NO_SSLv2 flag.

    Note that various services and clients had already     disabled SSL protocol 2 by default previously.

    Please also note that we built the 13.2 openSUSE openssl     already with 'no-ssl2'.

  - Disable all weak EXPORT ciphers by default. These can be     reenabled if required by old legacy software using the     environment variable 'OPENSSL_ALLOW_EXPORT'.

  - CVE-2016-0702 aka the 'CacheBleed' attack. (bsc#968050)     Various changes in the modular exponentation code were     added that make sure that it is not possible to recover     RSA secret keys by analyzing cache-bank conflicts on the     Intel Sandy-Bridge microarchitecture.

    Note that this was only exploitable if the malicious     code was running on the same hyper threaded Intel Sandy     Bridge processor as the victim thread performing     decryptions.

  - CVE-2016-0705 (bnc#968047): A double free() bug in the     DSA ASN1 parser code was fixed that could be abused to     facilitate a denial-of-service attack.

  - CVE-2016-0797 (bnc#968048): The BN_hex2bn() and     BN_dec2bn() functions had a bug that could result in an     attempt to de-reference a NULL pointer leading to     crashes. This could have security consequences if these     functions were ever called by user applications with     large untrusted hex/decimal data. Also, internal usage     of these functions in OpenSSL uses data from config     files or application command line arguments. If user     developed applications generated config file data based     on untrusted data, then this could have had security     consequences as well.

  - CVE-2016-0798 (bnc#968265) The SRP user database lookup     method SRP_VBASE_get_by_user() had a memory leak that     attackers could abuse to facility DoS attacks. To     mitigate the issue, the seed handling in     SRP_VBASE_get_by_user() was disabled even if the user     has configured a seed. Applications are advised to

  - We're unaffected by CVE-2016-0799 (boo#968374) because     we use glibc's printf implementation instead of the     built in one

Bugs fixed :

  - avoid running OPENSSL_config twice. This avoids breaking     engine loading. (boo#952871)

This update for openssl fixes various security issues :

Security issues fixed :

  - CVE-2016-0800 aka the 'DROWN' attack (bsc#968046):
    OpenSSL was vulnerable to a cross-protocol attack that     could lead to decryption of TLS sessions by using a     server supporting SSLv2 and EXPORT cipher suites as a     Bleichenbacher RSA padding oracle.

    This update changes the openssl library to :

  - Disable SSLv2 protocol support by default.

    This can be overridden by setting the environment     variable 'OPENSSL_ALLOW_SSL2' or by using     SSL_CTX_clear_options using the SSL_OP_NO_SSLv2 flag.

    Note that various services and clients had already     disabled SSL protocol 2 by default previously.

  - Disable all weak EXPORT ciphers by default. These can be     reenabled if required by old legacy software using the     environment variable 'OPENSSL_ALLOW_EXPORT'.

  - CVE-2016-0702 aka the 'CacheBleed' attack. (bsc#968050)     Various changes in the modular exponentation code were     added that make sure that it is not possible to recover     RSA secret keys by analyzing cache-bank conflicts on the     Intel Sandy-Bridge microarchitecture.

    Note that this was only exploitable if the malicious     code was running on the same hyper threaded Intel Sandy     Bridge processor as the victim thread performing     decryptions.

  - CVE-2016-0705 (bnc#968047): A double free() bug in the     DSA ASN1 parser code was fixed that could be abused to     facilitate a denial-of-service attack.

  - CVE-2016-0797 (bnc#968048): The BN_hex2bn() and     BN_dec2bn() functions had a bug that could result in an     attempt to de-reference a NULL pointer leading to     crashes. This could have security consequences if these     functions were ever called by user applications with     large untrusted hex/decimal data. Also, internal usage     of these functions in OpenSSL uses data from config     files or application command line arguments. If user     developed applications generated config file data based     on untrusted data, then this could have had security     consequences as well.

  - CVE-2016-0798 (bnc#968265) The SRP user database lookup     method SRP_VBASE_get_by_user() had a memory leak that     attackers could abuse to facility DoS attacks. To     mitigate the issue, the seed handling in     SRP_VBASE_get_by_user() was disabled even if the user     has configured a seed. Applications are advised to     migrate to SRP_VBASE_get1_by_user().

  - CVE-2016-0799 (bnc#968374) On many 64 bit systems, the     internal fmtstr() and doapr_outch() functions could     miscalculate the length of a string and attempt to     access out-of-bounds memory locations. These problems     could have enabled attacks where large amounts of     untrusted data is passed to the BIO_*printf functions.
    If applications use these functions in this way then     they could have been vulnerable. OpenSSL itself uses     these functions when printing out human-readable dumps     of ASN.1 data. Therefore applications that print this     data could have been vulnerable if the data is from     untrusted sources. OpenSSL command line applications     could also have been vulnerable when they print out     ASN.1 data, or if untrusted data is passed as command     line arguments. Libssl is not considered directly     vulnerable.

  - CVE-2015-3197 (bsc#963415): The SSLv2 protocol did not     block disabled ciphers.

Note that the March 1st 2016 release also references following CVEs that were fixed by us with CVE-2015-0293 in 2015 :

  - CVE-2016-0703 (bsc#968051): This issue only affected     versions of OpenSSL prior to March 19th 2015 at which     time the code was refactored to address vulnerability     CVE-2015-0293. It would have made the above 'DROWN'     attack much easier.

  - CVE-2016-0704 (bsc#968053): 'Bleichenbacher oracle in     SSLv2' This issue only affected versions of OpenSSL     prior to March 19th 2015 at which time the code was     refactored to address vulnerability CVE-2015-0293. It     would have made the above 'DROWN' attack much easier.

The version of OpenSSL installed on the remote AIX host is affected by the following vulnerabilities :

  - A key disclosure vulnerability exists due to improper     handling of cache-bank conflicts on the Intel     Sandy-bridge microarchitecture. An attacker can exploit     this to gain access to RSA key information.
    (CVE-2016-0702)

  - A double-free error exists due to improper validation of     user-supplied input when parsing malformed DSA private     keys. A remote attacker can exploit this to corrupt     memory, resulting in a denial of service condition or     the execution of arbitrary code. (CVE-2016-0705)

  - A NULL pointer dereference flaw exists in the     BN_hex2bn() and BN_dec2bn() functions. A remote attacker     can exploit this to trigger a heap corruption, resulting     in the execution of arbitrary code. (CVE-2016-0797)

  - A denial of service vulnerability exists due to improper     handling of invalid usernames. A remote attacker can     exploit this, via a specially crafted username, to leak     300 bytes of memory per connection, exhausting available     memory resources. (CVE-2016-0798)

  - Multiple memory corruption issues exist that allow a     remote attacker to cause a denial of service condition     or the execution of arbitrary code. (CVE-2016-0799)

  - A flaw exists that allows a cross-protocol     Bleichenbacher padding oracle attack known as DROWN     (Decrypting RSA with Obsolete and Weakened eNcryption).
    This vulnerability exists due to a flaw in the Secure     Sockets Layer Version 2 (SSLv2) implementation, and it     allows captured TLS traffic to be decrypted. A     man-in-the-middle attacker can exploit this to decrypt     the TLS connection by utilizing previously captured     traffic and weak cryptography along with a series of     specially crafted connections to an SSLv2 server that     uses the same private key. (CVE-2016-0800)

  - A denial of service vulnerability exists due to improper     verification of memory allocation by the doapr_outch()     function in file crypto/bio/b_print.c. A remote attacker     can exploit this, via a specially crafted string, to     write data out-of-bounds or exhaust memory resources or     possibly have other unspecified impact. (CVE-2016-2842)

According to its version number, the instance of Splunk hosted on the remote web server is Enterprise 5.0.x prior to 5.0.15, 6.0.x prior to 6.0.11, 6.1.x prior to 6.1.10, 6.2.x prior to 6.2.9, 6.3.x prior to 6.3.3.4, Light 6.2.x prior to 6.2.9, or Light 6.3.x prior to 6.3.3.4.
It is, therefore, affected by the following vulnerabilities :

  - A type confusion error exists in the bundled version of     libxslt in the xsltStylePreCompute() function due to     improper handling of invalid values. A context-dependent     attacker can exploit this, via crafted XML files, to     cause a denial of service condition. (CVE-2015-7995)

  - A key disclosure vulnerability exists in the bundled     version of OpenSSL due to improper handling of     cache-bank conflicts on the Intel Sandy-bridge     microarchitecture. An attacker can exploit this to gain     access to RSA key information. (CVE-2016-0702)

  - A double-free error exists in the bundled version of     OpenSSL due to improper validation of user-supplied     input when parsing malformed DSA private keys. A remote     attacker can exploit this to corrupt memory, resulting     in a denial of service condition or the execution of     arbitrary code. (CVE-2016-0705)

  - A NULL pointer dereference flaw exists in the bundled     version of OpenSSL in the BN_hex2bn() and BN_dec2bn()     functions. A remote attacker can exploit this to trigger     a heap corruption, resulting in the execution of     arbitrary code. (CVE-2016-0797)

  - A denial of service vulnerability exists in the bundled     version of OpenSSL due to improper handling of invalid     usernames. A remote attacker can exploit this, via a     specially crafted username, to leak 300 bytes of memory     per connection, exhausting available memory resources.
    (CVE-2016-0798)

  - Multiple memory corruption issues exist in the bundled     version of OpenSSL that allow a remote attacker to cause     a denial of service condition or the execution of     arbitrary code. (CVE-2016-0799)

  - A flaw exists in the bundled version of OpenSSL that     allows a cross-protocol Bleichenbacher padding oracle     attack known as DROWN (Decrypting RSA with Obsolete and     Weakened eNcryption). This vulnerability exists due to a     flaw in the Secure Sockets Layer Version 2 (SSLv2)     implementation, and it allows captured TLS traffic to be     decrypted. A man-in-the-middle attacker can exploit this     to decrypt the TLS connection by utilizing previously     captured traffic and weak cryptography along with a     series of specially crafted connections to an SSLv2     server that uses the same private key. (CVE-2016-0800)

  - A flaw exists due to improper handling of specially     crafted HTTP requests that contain specific headers. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition.

  - A flaw exists due to improper handling of malformed HTTP     requests. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition.

  - A flaw exists that is triggered when directly accessing     objects. An authenticated, remote attacker can exploit     this to disclose search logs.

  - A flaw exists due to the failure to honor the     sslVersions keyword for TLS protocol versions,     preventing users from enforcing TLS policies.

  - A path traversal vulnerability exists in the 'collect'     command due to improper sanitization of user-supplied     input. An authenticated, remote attacker can exploit     this, via a specially crafted request, to execute     arbitrary code arbitrary code with the privileges of the     user running the splunkd process.

  - A path traversal vulnerability exists in the 'inputcsv'     and 'outputcsv' commands due to improper sanitization of     user-supplied input. An authenticated, remote attacker     can exploit this, via a specially crafted request, to     can access or overwrite file paths.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A cross-protocol attack was discovered that could lead to decryption of TLS sessions by using a server supporting SSLv2 and EXPORT cipher suites as a Bleichenbacher RSA padding oracle. Note that traffic between clients and non-vulnerable servers can be decrypted provided another server supporting SSLv2 and EXPORT ciphers (even with a different protocol such as SMTP, IMAP or POP3) shares the RSA keys of the non-vulnerable server. This vulnerability is known as DROWN.
[CVE-2016-0800]

A double free bug was discovered when OpenSSL parses malformed DSA private keys and could lead to a DoS attack or memory corruption for applications that receive DSA private keys from untrusted sources.
This scenario is considered rare. [CVE-2016-0705]

The SRP user database lookup method SRP_VBASE_get_by_user had confusing memory management semantics; the returned pointer was sometimes newly allocated, and sometimes owned by the callee. The calling code has no way of distinguishing these two cases.
[CVE-2016-0798]

In the BN_hex2bn function, the number of hex digits is calculated using an int value |i|. Later |bn_expand| is called with a value of |i
* 4|. For large values of |i| this can result in |bn_expand| not allocating any memory because |i * 4| is negative. This can leave the internal BIGNUM data field as NULL leading to a subsequent NULL pointer dereference. For very large values of |i|, the calculation |i
* 4| could be a positive value smaller than |i|. In this case memory is allocated to the internal BIGNUM data field, but it is insufficiently sized leading to heap corruption. A similar issue exists in BN_dec2bn. This could have security consequences if BN_hex2bn/BN_dec2bn is ever called by user applications with very large untrusted hex/dec data. This is anticipated to be a rare occurrence. [CVE-2016-0797]

The internal |fmtstr| function used in processing a '%s' formatted string in the BIO_*printf functions could overflow while calculating the length of a string and cause an out-of-bounds read when printing very long strings. [CVE-2016-0799]

A side-channel attack was found which makes use of cache-bank conflicts on the Intel Sandy-Bridge microarchitecture which could lead to the recovery of RSA keys. [CVE-2016-0702]

s2_srvr.c did not enforce that clear-key-length is 0 for non-export ciphers. If clear-key bytes are present for these ciphers, they displace encrypted-key bytes. [CVE-2016-0703]

s2_srvr.c overwrites the wrong bytes in the master key when applying Bleichenbacher protection for export cipher suites. [CVE-2016-0704] Impact : Servers that have SSLv2 protocol enabled are vulnerable to the 'DROWN' attack which allows a remote attacker to fast attack many recorded TLS connections made to the server, even when the client did not make any SSLv2 connections themselves.

An attacker who can supply malformed DSA private keys to OpenSSL applications may be able to cause memory corruption which would lead to a Denial of Service condition. [CVE-2016-0705]

An attacker connecting with an invalid username can cause memory leak, which could eventually lead to a Denial of Service condition.
[CVE-2016-0798]

An attacker who can inject malformed data into an application may be able to cause memory corruption which would lead to a Denial of Service condition. [CVE-2016-0797, CVE-2016-0799]

A local attacker who has control of code in a thread running on the same hyper-threaded core as the victim thread which is performing decryptions could recover RSA keys. [CVE-2016-0702]

An eavesdropper who can intercept SSLv2 handshake can conduct an efficient divide-and-conquer key recovery attack and use the server as an oracle to determine the SSLv2 master-key, using only 16 connections to the server and negligible computation. [CVE-2016-0703]

An attacker can use the Bleichenbacher oracle, which enables more efficient variant of the DROWN attack. [CVE-2016-0704]

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-120:02 advisory.

    The OpenSSL toolkit provides support for secure communications between     machines. OpenSSL includes a certificate management tool and shared     libraries which provide various cryptographic algorithms and     protocols.
    Security issues fixed with this release:
    CVE-2015-3197     ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f     does not prevent use of disabled ciphers, which makes it easier for     man-in-the-middle attackers to defeat cryptographic protection     mechanisms by performing computations on SSLv2 traffic, related to the     get_client_master_key and get_client_hello functions.
    CVE-2016-0702
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-0705
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-0797
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-0800
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2568 advisory.

    IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

    This update upgrades IBM Java SE 8 to version 8 SR5-FP20.

    Security Fix(es):

    * IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)

    * openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)

    * openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)

    * IBM JDK: DoS in the java.math component (CVE-2018-1517)

    * IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)

    * Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)     (CVE-2018-2940)

    * OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)     (CVE-2018-2952)

    * Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)

    * OpenSSL: Double-free in DSA code (CVE-2016-0705)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    Red Hat would like to thank the OpenSSL project for reporting CVE-2016-0705. Upstream acknowledges Adam     Langley (Google/BoringSSL) as the original reporter of CVE-2016-0705.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for java-1_8_0-ibm to 8.0.5.20 fixes the following security issues :

CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit (bsc#1104668)

CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data (bsc#1104668)

CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit vulnerability allowed unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data (bsc#1104668)

CVE-2018-2964: Vulnerability in subcomponent: Deployment. Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE. (bsc#1104668)

CVE-2016-0705: Prevent double free in the dsa_priv_decode function that allowed remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key (bsc#1104668)

CVE-2017-3732: Prevent carry propagating bug in the x86_64 Montgomery squaring procedure (bsc#1104668)

CVE-2017-3736: Prevent carry propagating bug in the x86_64 Montgomery squaring procedure (bsc#1104668)

CVE-2018-1517: Unspecified vulnerability (bsc#1104668)

CVE-2018-1656: Unspecified vulnerability (bsc#1104668)

CVE-2018-12539: Users other than the process owner might have been able to use Java Attach API to connect to an IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code (bsc#1104668)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
89078	Ubuntu 14.04 LTS : OpenSSL vulnerabilities (USN-2914-1)	Nessus	Ubuntu Local Security Checks	2016/3/2	2024/8/27	critical
91618	openSUSE Security Update : nodejs (openSUSE-2016-715)	Nessus	SuSE Local Security Checks	2016/6/15	2021/1/19	critical
92185	Fedora 23 : mingw-openssl (2016-e1234b65a2)	Nessus	Fedora Local Security Checks	2016/7/14	2026/2/2	critical
89085	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : openssl (SSA:2016-062-02) (DROWN)	Nessus	Slackware Local Security Checks	2016/3/3	2021/1/14	critical
89090	openSUSE Security Update : openssl (openSUSE-2016-288) (DROWN)	Nessus	SuSE Local Security Checks	2016/3/3	2021/1/19	critical
89092	openSUSE Security Update : openssl (openSUSE-2016-292) (DROWN)	Nessus	SuSE Local Security Checks	2016/3/3	2021/1/19	critical
90448	AIX OpenSSL Advisory : openssl_advisory18.asc / openssl_advisory19.asc (DROWN)	Nessus	AIX Local Security Checks	2016/4/13	2023/4/21	critical
90705	Splunk Enterprise < 5.0.15 / 6.0.11 / 6.1.10 / 6.2.9 / 6.3.3.4 or Splunk Light < 6.2.9 / 6.3.3.4 Multiple Vulnerabilities (DROWN)	Nessus	CGI abuses	2016/4/25	2019/11/20	critical
92921	FreeBSD : FreeBSD -- Multiple OpenSSL vulnerabilities (7b1a4a27-600a-11e6-a6c3-14dae9d210b8) (DROWN)	Nessus	FreeBSD Local Security Checks	2016/8/12	2026/1/28	critical
289938	MiracleLinux 7 : openssl-1.0.1e-51.el7.4 (AXSA:2016-120:02)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical
112131	RHEL 7 : java-1.8.0-ibm (RHSA-2018:2568)	Nessus	Red Hat Local Security Checks	2018/8/28	2024/11/5	critical
118293	SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2018:2839-2)	Nessus	SuSE Local Security Checks	2018/10/22	2022/2/4	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical