An update for openssl is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es) :

* An integer underflow leading to an out of bounds read flaw was found in OpenSSL. A remote attacker could possibly use this flaw to crash a 32-bit TLS/SSL server or client using OpenSSL if it used the RC4-MD5 cipher suite. (CVE-2017-3731)

* A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections form other clients. (CVE-2016-8610)

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for compat-openssl098 fixes the following issues :

Security issues fixed :

  - CVE-2018-0734: Fixed timing vulnerability in DSA     signature generation (bsc#1113652).

  - CVE-2018-5407: Fixed elliptic curve scalar     multiplication timing attack defenses (bsc#1113534).

  - CVE-2016-8610: Adjusted current fix and add missing     error string (bsc#1110018).

  - Fixed the 'One and Done' side-channel attack on RSA     (bsc#1104789).

This update was imported from the SUSE:SLE-12:Update update project.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3183-1 advisory.

    Stefan Buehler discovered that GnuTLS incorrectly verified the serial length of OCSP responses. A remote     attacker could possibly use this issue to bypass certain certificate validation measures. This issue only     applied to Ubuntu 16.04 LTS. (CVE-2016-7444)

    Shi Lei discovered that GnuTLS incorrectly handled certain warning alerts. A remote attacker could     possibly use this issue to cause GnuTLS to hang, resulting in a denial of service. This issue has only     been addressed in Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-8610)

    It was discovered that GnuTLS incorrectly decoded X.509 certificates with a Proxy Certificate Information     extension. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of     service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 16.10.
    (CVE-2017-5334)

    It was discovered that GnuTLS incorrectly handled certain OpenPGP certificates. A remote attacker could     possibly use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute     arbitrary code. (CVE-2017-5335, CVE-2017-5336, CVE-2017-5337)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0286 advisory.

    - fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0286 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * An integer underflow leading to an out of bounds read flaw was found in OpenSSL. A remote attacker could     possibly use this flaw to crash a 32-bit TLS/SSL server or client using OpenSSL if it used the RC4-MD5     cipher suite. (CVE-2017-3731)

    * A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets     during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an     excessive amount of CPU and fail to accept connections form other clients. (CVE-2016-8610)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Due to improper handling of alert packets, OpenSSL would consume an excessive amount of CPU time processing undefined alert messages.
Impact : A remote attacker who can initiate handshakes with an OpenSSL based server can cause the server to consume a lot of computation power with very little bandwidth usage, and may be able to use this technique in a leveraged Denial of Service attack.

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An integer underflow leading to an out of bounds read     flaw was found in OpenSSL. A remote attacker could     possibly use this flaw to crash a 32-bit TLS/SSL server     or client using OpenSSL if it used the RC4-MD5 cipher     suite. (CVE-2017-3731)

  - A denial of service flaw was found in the way the     TLS/SSL protocol defined processing of ALERT packets     during a connection handshake. A remote attacker could     use this flaw to make a TLS/SSL server consume an     excessive amount of CPU and fail to accept connections     form other clients. (CVE-2016-8610)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A denial of service flaw was found in the way the     TLS/SSL protocol defined processing of ALERT packets     during a connection handshake. A remote attacker could     use this flaw to make a TLS/SSL server consume an     excessive amount of CPU and fail to accept connections     form other clients.(CVE-2016-8610)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3181-1 advisory.

    Guido Vranken discovered that OpenSSL used undefined behaviour when performing pointer arithmetic. A     remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service.
    This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS as other releases were fixed in a     previous security update. (CVE-2016-2177)

    It was discovered that OpenSSL did not properly handle Montgomery multiplication, resulting in incorrect     results leading to transient failures. This issue only applied to Ubuntu 16.04 LTS, and Ubuntu 16.10.
    (CVE-2016-7055)

    It was discovered that OpenSSL did not properly use constant-time operations when performing ECDSA P-256     signing. A remote attacker could possibly use this issue to perform a timing attack and recover private     ECDSA keys. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2016-7056)

    Shi Lei discovered that OpenSSL incorrectly handled certain warning alerts. A remote attacker could     possibly use this issue to cause OpenSSL to stop responding, resulting in a denial of service.
    (CVE-2016-8610)

    Robert wicki discovered that OpenSSL incorrectly handled certain truncated packets. A remote attacker     could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2017-3731)

    It was discovered that OpenSSL incorrectly performed the x86_64 Montgomery squaring procedure. While     unlikely, a remote attacker could possibly use this issue to recover private keys. This issue only applied     to Ubuntu 16.04 LTS, and Ubuntu 16.10. (CVE-2017-3732)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for openssl fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)

Security issues fixed :

  - CVE-2016-7056: A local ECSDA P-256 timing attack that     might have allowed key recovery was fixed (bsc#1019334)

  - CVE-2016-8610: A remote denial of service in SSL alert     handling was fixed (bsc#1005878)

  - CVE-2016-2108: Added a missing commit for CVE-2016-2108,     fixing the negative zero handling in the ASN.1 decoder     (bsc#1004499)

  - CVE-2017-3731: Truncated packet could crash via OOB read     (bsc#1022085, CVE-2017-3731)

  - Degrade the 3DES cipher to MEDIUM in SSLv2 (bsc#1001912)

Bugs fixed :

  - fix crash in openssl speed (bsc#1000677)

  - fix ca-bundle path (bsc#1022271)

This update was imported from the SUSE:SLE-12-SP1:Update update project.

This update for openssl fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641) Security issues fixed :

  - CVE-2016-7056: A local ECSDA P-256 timing attack that     might have allowed key recovery was fixed (bsc#1019334)

  - CVE-2016-8610: A remote denial of service in SSL alert     handling was fixed (bsc#1005878)

  - degrade 3DES to MEDIUM in SSL2 (bsc#1001912)

  - CVE-2016-2108: Added a missing commit for CVE-2016-2108,     fixing the negative zero handling in the ASN.1 decoder     (bsc#1004499) Bugs fixed :

  - fix crash in openssl speed (bsc#1000677)

  - don't attempt session resumption if no ticket is present     and session ID length is zero (bsc#984663)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
101424	Virtuozzo 6 : openssl / openssl-devel / openssl-perl / etc (VZLSA-2017-0286)	Nessus	Virtuozzo Local Security Checks	2017/7/13	2025/12/11	high
119641	openSUSE Security Update : compat-openssl098 (openSUSE-2018-1529)	Nessus	SuSE Local Security Checks	2018/12/13	2021/1/19	medium
96952	Ubuntu 14.04 LTS / 16.04 LTS : GnuTLS vulnerabilities (USN-3183-1)	Nessus	Ubuntu Local Security Checks	2017/2/2	2025/9/3	critical
97293	Oracle Linux 6 / 7 : openssl (ELSA-2017-0286)	Nessus	Oracle Linux Local Security Checks	2017/2/21	2025/12/31	high
97294	RHEL 6 / 7 : openssl (RHSA-2017:0286)	Nessus	Red Hat Local Security Checks	2017/2/21	2025/12/31	high
94492	FreeBSD : FreeBSD -- OpenSSL Remote DoS vulnerability (0fcd3af0-a0fe-11e6-b1cf-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	2016/11/3	2026/1/20	high
99875	EulerOS 2.0 SP2 : openssl (EulerOS-SA-2017-1030)	Nessus	Huawei Local Security Checks	2017/5/1	2025/12/22	high
99887	EulerOS 2.0 SP1 : gnutls (EulerOS-SA-2017-1042)	Nessus	Huawei Local Security Checks	2017/5/1	2025/12/22	high
96927	Ubuntu 14.04 LTS / 16.04 LTS : OpenSSL vulnerabilities (USN-3181-1)	Nessus	Ubuntu Local Security Checks	2017/2/1	2024/8/27	critical
97275	openSUSE Security Update : openssl (openSUSE-2017-255)	Nessus	SuSE Local Security Checks	2017/2/21	2025/12/31	critical
97494	SUSE SLES11 Security Update : openssl (SUSE-SU-2017:0585-1)	Nessus	SuSE Local Security Checks	2017/3/2	2025/12/31	critical

検出

プラグインの検索

high

medium

critical

high

high

high

high

high

critical

critical

critical