According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A race condition was found in the session handling code     of OpenSSL. This issue could possibly cause a     multi-threaded TLS/SSL client using OpenSSL to double     free session ticket data and crash.(CVE-2015-1791)

  - An out-of-bounds read flaw was found in the     X509_cmp_time() function of OpenSSL, which is used to     test the expiry dates of SSL/TLS certificates. An     attacker could possibly use a specially crafted SSL/TLS     certificate or CRL (Certificate Revocation List), which     when parsed by an application would cause that     application to crash.(CVE-2015-1789)

  - The ASN1_STRING_print_ex function in OpenSSL before     0.9.8k allows remote attackers to cause a denial of     service (invalid memory access and application crash)     via vectors that trigger printing of a (1) BMPString or     (2) UniversalString with an invalid encoded     length.(CVE-2009-0590)

  - An invalid-free flaw was found in the way OpenSSL     handled certain DTLS handshake messages. A malicious     DTLS client or server could send a specially crafted     message to the peer, which could cause the application     to crash or potentially result in arbitrary code     execution.(CVE-2014-8176)

  - The DTLS implementation in OpenSSL before 0.9.8s and     1.x before 1.0.0f performs a MAC check only if certain     padding is valid, which makes it easier for remote     attackers to recover plaintext via a padding oracle     attack.(CVE-2011-4108)

  - Off-by-one error in the SSL_get_shared_ciphers function     in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f,     might allow remote attackers to execute arbitrary code     via a crafted packet that triggers a one-byte buffer     underflow. NOTE: this issue was introduced as a result     of a fix for CVE-2006-3738. As of 20071012, it is     unknown whether code execution is     possible.(CVE-2007-5135)

  - A NULL pointer dereference flaw was found in the DTLS     implementation of OpenSSL. A remote attacker could send     a specially crafted DTLS message, which would cause an     OpenSSL server to crash.(CVE-2014-3571)

  - The asn1_d2i_read_bio function in     crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0     before 1.0.0i, and 1.0.1 before 1.0.1a does not     properly interpret integer data, which allows remote     attackers to conduct buffer overflow attacks, and cause     a denial of service (memory corruption) or possibly     have unspecified other impact, via crafted DER data, as     demonstrated by an X.509 certificate or an RSA public     key.(CVE-2012-2110)

  - It was discovered that the SSLv2 servers using OpenSSL     accepted SSLv2 connection handshakes that indicated     non-zero clear key length for non-export cipher suites.
    An attacker could use this flaw to decrypt recorded     SSLv2 sessions with the server by using it as a     decryption oracle.(CVE-2016-0703)

  - ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote     attackers to cause a denial of service (NULL pointer     dereference and daemon crash) via a DTLS     ChangeCipherSpec packet that occurs before     ClientHello.(CVE-2009-1386)

  - Memory leak in the zlib_stateful_finish function in     crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and     1.0.0 Beta through Beta 4 allows remote attackers to     cause a denial of service (memory consumption) via     vectors that trigger incorrect calls to the     CRYPTO_cleanup_all_ex_data function, as demonstrated by     use of SSLv3 and PHP with the Apache HTTP Server, a     related issue to CVE-2008-1678.(CVE-2009-4355)

  - A flaw was discovered in the way OpenSSL handled DTLS     packets. A remote attacker could use this flaw to cause     a DTLS server or client using OpenSSL to crash or use     excessive amounts of memory.(CVE-2014-3507)

  - The dtls1_buffer_record function in ssl/d1_pkt.c in     OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote     attackers to cause a denial of service (memory     consumption) via a large series of 'future epoch' DTLS     records that are buffered in a queue, aka 'DTLS record     buffer limitation bug.'(CVE-2009-1377)

  - A use-after-free flaw was found in the way OpenSSL     imported malformed Elliptic Curve private keys. A     specially crafted key file could cause an application     using OpenSSL to crash when imported.(CVE-2015-0209)

  - A denial of service flaw was found in the way OpenSSL     verified certain signed messages using CMS     (Cryptographic Message Syntax). A remote attacker could     cause an application using OpenSSL to use excessive     amounts of memory by sending a specially crafted     message for verification.(CVE-2015-1792)

  - A denial of service flaw was found in the way OpenSSL     handled SSLv2 handshake messages. A remote attacker     could use this flaw to cause a TLS/SSL server using     OpenSSL to exit on a failed assertion if it had both     the SSLv2 protocol and EXPORT-grade cipher suites     enabled.(CVE-2015-0293)

  - An invalid pointer use flaw was found in OpenSSL's     ASN1_TYPE_cmp() function. A remote attacker could crash     a TLS/SSL client or server using OpenSSL via a     specially crafted X.509 certificate when the     attacker-supplied certificate was verified by the     application.(CVE-2015-0286)

  - Multiple flaws were found in the way OpenSSL parsed     X.509 certificates. An attacker could use these flaws     to modify an X.509 certificate to produce a certificate     with a different fingerprint without invalidating its     signature, and possibly bypass fingerprint-based     blacklisting in applications.(CVE-2014-8275)

  - If an application encounters a fatal protocol error and     then calls SSL_shutdown() twice (once to send a     close_notify, and once to receive one) then OpenSSL can     respond differently to the calling application if a 0     byte record is received with invalid padding compared     to if a 0 byte record is received with an invalid MAC.
    If the application then behaves differently based on     that in a way that is detectable to the remote peer,     then this amounts to a padding oracle that could be     used to decrypt data. In order for this to be     exploitable 'non-stitched' ciphersuites must be in use.
    Stitched ciphersuites are optimised implementations of     certain commonly used ciphersuites. Also the     application must call SSL_shutdown() twice even if a     protocol error has occurred (applications should not do     this but some do anyway). Fixed in OpenSSL 1.0.2r     (Affected 1.0.2-1.0.2q).(CVE-2019-1559)

  - A flaw was found in the way the TLS protocol composes     the Diffie-Hellman exchange (for both export and     non-export grade cipher suites). An attacker could use     this flaw to downgrade a DHE connection to use     export-grade key sizes, which could then be broken by     sufficient pre-computation. This can lead to a passive     man-in-the-middle attack in which the attacker is able     to decrypt all traffic.(CVE-2015-4000)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Cisco IOS device is missing a vendor-supplied security patch and has an IOS service configured to use TLS or SSL. It is, therefore, affected by the following vulnerabilities in the bundled OpenSSL library :

  - A use-after-free condition exists in the     d2i_ECPrivateKey() function due to improper processing     of malformed EC private key files during import. A     remote attacker can exploit this to dereference or free     already freed memory, resulting in a denial of service     or other unspecified impact. (CVE-2015-0209)

  - An invalid read error exists in the ASN1_TYPE_cmp()     function due to improperly performed boolean-type     comparisons. A remote attacker can exploit this, via a     crafted X.509 certificate to an endpoint that uses the     certificate-verification feature, to cause an invalid     read operation, resulting in a denial of service.
    (CVE-2015-0286)

  - A flaw exists in the ASN1_item_ex_d2i() function due to     a failure to reinitialize 'CHOICE' and 'ADB' data     structures when reusing a structure in ASN.1 parsing.
    This allows a remote attacker to cause an invalid write     operation and memory corruption, resulting in a denial     of service. (CVE-2015-0287)

  - A NULL pointer dereference flaw exists in the     X509_to_X509_REQ() function due to improper processing     of certificate keys. This allows a remote attacker, via     a crafted X.509 certificate, to cause a denial of     service. (CVE-2015-0288)

  - A NULL pointer dereference flaw exists in the PKCS#7     parsing code due to incorrect handling of missing outer     ContentInfo. This allows a remote attacker, using an     application that processes arbitrary PKCS#7 data and     providing malformed data with ASN.1 encoding, to cause     a denial of service. (CVE-2015-0289)

  - An integer underflow condition exists in the     EVP_DecodeUpdate() function due to improper validation     of base64 encoded input when decoding. This allows a     remote attacker, using maliciously crafted base64 data,     to cause a segmentation fault or memory corruption,     resulting in a denial of service or possibly the     execution of arbitrary code. (CVE-2015-0292)

  - A flaw exists in servers that both support SSLv2 and     enable export cipher suites due to improper     implementation of SSLv2. A remote attacker can exploit     this, via a crafted CLIENT-MASTER-KEY message, to cause     a denial of service. (CVE-2015-0293)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:0752 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)     and Transport Layer Security (TLS v1) protocols, as well as a     full-strength, general purpose cryptography library.

    An invalid pointer use flaw was found in OpenSSL's ASN1_TYPE_cmp()     function. A remote attacker could crash a TLS/SSL client or server using     OpenSSL via a specially crafted X.509 certificate when the     attacker-supplied certificate was verified by the application.
    (CVE-2015-0286)

    An integer underflow flaw, leading to a buffer overflow, was found in the     way OpenSSL decoded malformed Base64-encoded inputs. An attacker able to     make an application using OpenSSL decode a specially crafted Base64-encoded     input (such as a PEM file) could use this flaw to cause the application to     crash. Note: this flaw is not exploitable via the TLS/SSL protocol because     the data being transferred is not Base64-encoded. (CVE-2015-0292)

    A denial of service flaw was found in the way OpenSSL handled SSLv2     handshake messages. A remote attacker could use this flaw to cause a     TLS/SSL server using OpenSSL to exit on a failed assertion if it had both     the SSLv2 protocol and EXPORT-grade cipher suites enabled. (CVE-2015-0293)

    A use-after-free flaw was found in the way OpenSSL imported malformed     Elliptic Curve private keys. A specially crafted key file could cause an     application using OpenSSL to crash when imported. (CVE-2015-0209)

    An out-of-bounds write flaw was found in the way OpenSSL reused certain     ASN.1 structures. A remote attacker could possibly use a specially crafted     ASN.1 structure that, when parsed by an application, would cause that     application to crash. (CVE-2015-0287)

    A NULL pointer dereference flaw was found in OpenSSL's X.509 certificate     handling implementation. A specially crafted X.509 certificate could cause     an application using OpenSSL to crash if the application attempted to     convert the certificate to a certificate request. (CVE-2015-0288)

    A NULL pointer dereference was found in the way OpenSSL handled certain     PKCS#7 inputs. An attacker able to make an application using OpenSSL     verify, decrypt, or parse a specially crafted PKCS#7 input could cause that     application to crash. TLS/SSL clients and servers using OpenSSL were not     affected by this flaw. (CVE-2015-0289)

    Red Hat would like to thank the OpenSSL project for reporting     CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0292,     and CVE-2015-0293. Upstream acknowledges Stephen Henson of the OpenSSL     development team as the original reporter of CVE-2015-0286, Emilia Ksper     of the OpenSSL development team as the original reporter of CVE-2015-0287,     Brian Carpenter as the original reporter of CVE-2015-0288, Michal Zalewski     of Google as the original reporter of CVE-2015-0289, Robert Dugal and David     Ramos as the original reporters of CVE-2015-0292, and Sean Burford of     Google and Emilia Ksper of the OpenSSL development team as the original     reporters of CVE-2015-0293.

    All openssl users are advised to upgrade to these updated packages, which     contain backported patches to correct these issues. For the update to take     effect, all services linked to the OpenSSL library must be restarted, or     the system rebooted.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

New openssl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues.

According to its self-reported version number, the Apache Tomcat server listening on the remote host is 8.0.x prior to 8.0.21. It is, therefore, affected by the following vulnerabilities :

  - A NULL pointer dereference flaw exists when the SSLv3     option isn't enabled and an SSLv3 ClientHello is     received. This allows a remote attacker, using an     unexpected handshake, to crash the daemon, resulting in     a denial of service. (CVE-2014-3569)

  - The BIGNUM squaring (BN_sqr) implementation does not     properly calculate the square of a BIGNUM value. This     allows remote attackers to defeat cryptographic     protection mechanisms. (CVE-2014-3570)

  - A NULL pointer dereference flaw exists with     dtls1_get_record() when handling DTLS messages. A remote     attacker, using a specially crafted DTLS message, can     cause a denial of service. (CVE-2014-3571)

  - A flaw exists with ECDH handshakes when using an ECDSA     certificate without a ServerKeyExchange message. This     allows a remote attacker to trigger a loss of forward     secrecy from the ciphersuite. (CVE-2014-3572)

  - A flaw exists when accepting non-DER variations of     certificate signature algorithms and signature encodings     due to a lack of enforcement of matches between signed     and unsigned portions. A remote attacker, by including     crafted data within a certificate's unsigned portion,     can bypass fingerprint-based certificate-blacklist     protection mechanisms. (CVE-2014-8275)

  - A security feature bypass vulnerability, known as FREAK     (Factoring attack on RSA-EXPORT Keys), exists due to the     support of weak EXPORT_RSA cipher suites with keys less     than or equal to 512 bits. A man-in-the-middle attacker     may be able to downgrade the SSL/TLS connection to use     EXPORT_RSA cipher suites which can be factored in a     short amount of time, allowing the attacker to intercept     and decrypt the traffic. (CVE-2015-0204)

  - A flaw exists when accepting DH certificates for client     authentication without the CertificateVerify message.
    This allows a remote attacker to authenticate to the     service without a private key. (CVE-2015-0205)

  - A memory leak occurs in dtls1_buffer_record()     when handling a saturation of DTLS records containing     the same number sequence but for the next epoch. This     allows a remote attacker to cause a denial of service.
    (CVE-2015-0206)

  - A use-after-free condition exists in the     d2i_ECPrivateKey() function due to improper processing     of malformed EC private key files during import. A     remote attacker can exploit this to dereference or free     already freed memory, resulting in a denial of service     or other unspecified impact. (CVE-2015-0209)

  - An invalid read flaw exists in the ASN1_TYPE_cmp()     function due to improperly performed boolean-type     comparisons. A remote attacker can exploit this, via a     crafted X.509 certificate to an endpoint that uses the     certificate-verification feature, to cause an invalid     read operation, resulting in a denial of service.
    (CVE-2015-0286)

  - A flaw exists in the ASN1_item_ex_d2i() function due to     a failure to reinitialize 'CHOICE' and 'ADB' data     structures when reusing a structure in ASN.1 parsing.
    This allows a remote attacker to cause an invalid write     operation and memory corruption, resulting in a denial     of service. (CVE-2015-0287)

  - A NULL pointer dereference flaw exists in the     X509_to_X509_REQ() function due to improper processing     of certificate keys. This allows a remote attacker, via     a crafted X.509 certificate, to cause a denial of     service. (CVE-2015-0288)

  - A NULL pointer dereference flaw exists in the PKCS#7     parsing code due to incorrect handling of missing outer     ContentInfo. This allows a remote attacker, using an     application that processes arbitrary PKCS#7 data and     providing malformed data with ASN.1 encoding, to cause     a denial of service. (CVE-2015-0289)

  - A flaw exists in servers that both support SSLv2 and     enable export cipher suites due to improper     implementation of SSLv2. A remote attacker can exploit     this, via a crafted CLIENT-MASTER-KEY message, to cause     a denial of service. (CVE-2015-0293)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

OpenSSL was updated to fix various security issues.

Following security issues were fixed :

  - CVE-2015-0209: A Use After Free following     d2i_ECPrivatekey error was fixed which could lead to     crashes for attacker supplied Elliptic Curve keys. This     could be exploited over SSL connections with client     supplied keys.

  - CVE-2015-0286: A segmentation fault in ASN1_TYPE_cmp was     fixed that could be exploited by attackers when e.g.
    client authentication is used. This could be exploited     over SSL connections.

  - CVE-2015-0287: A ASN.1 structure reuse memory corruption     was fixed. This problem can not be exploited over     regular SSL connections, only if specific client     programs use specific ASN.1 routines.

  - CVE-2015-0288: A X509_to_X509_REQ NULL pointer     dereference was fixed, which could lead to crashes. This     function is not commonly used, and not reachable over     SSL methods.

  - CVE-2015-0289: Several PKCS7 NULL pointer dereferences     were fixed, which could lead to crashes of programs     using the PKCS7 APIs. The SSL apis do not use those by     default.

  - CVE-2015-0293: Denial of service via reachable assert in     SSLv2 servers, could be used by remote attackers to     terminate the server process. Note that this requires     SSLv2 being allowed, which is not the default.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.4. It is, therefore, affected multiple vulnerabilities in the following components :

  - Admin Framework
  - afpserver
  - apache
  - AppleFSCompression
  - AppleGraphicsControl
  - AppleThunderboltEDMService
  - ATS
  - Bluetooth
  - Certificate Trust Policy
  - CFNetwork HTTPAuthentication
  - CoreText
  - coreTLS
  - DiskImages
  - Display Drivers
  - EFI
  - FontParser
  - Graphics Driver
  - ImageIO
  - Install Framework Legacy
  - Intel Graphics Driver
  - IOAcceleratorFamily
  - IOFireWireFamily
  - Kernel
  - kext tools
  - Mail
  - ntfs
  - ntp
  - OpenSSL
  - QuickTime
  - Security
  - Spotlight
  - SQLite
  - System Stats
  - TrueTypeScaler
  - zip

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

OpenSSL project reports :

- Reclassified: RSA silently downgrades to EXPORT_RSA [Client] (CVE-2015-0204). OpenSSL only.

- Segmentation fault in ASN1_TYPE_cmp (CVE-2015-0286)

- ASN.1 structure reuse memory corruption (CVE-2015-0287)

- PKCS#7 NULL pointer dereferences (CVE-2015-0289)

- Base64 decode (CVE-2015-0292). OpenSSL only.

- DoS via reachable assert in SSLv2 servers (CVE-2015-0293). OpenSSL only.

- Use After Free following d2i_ECPrivatekey error (CVE-2015-0209)

- X509_to_X509_REQ NULL pointer deref (CVE-2015-0288)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2537-1 advisory.

    It was discovered that OpenSSL incorrectly handled malformed EC private key files. A remote attacker could     possibly use this issue to cause OpenSSL to crash, resulting in a denial of service, or execute arbitrary     code. (CVE-2015-0209)

    Stephen Henson discovered that OpenSSL incorrectly handled comparing ASN.1 boolean types. A remote     attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service.
    (CVE-2015-0286)

    Emilia Ksper discovered that OpenSSL incorrectly handled ASN.1 structure reuse. A remote attacker could     possibly use this issue to cause OpenSSL to crash, resulting in a denial of service, or execute arbitrary     code. (CVE-2015-0287)

    Brian Carpenter discovered that OpenSSL incorrectly handled invalid certificate keys. A remote attacker     could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2015-0288)

    Michal Zalewski discovered that OpenSSL incorrectly handled missing outer ContentInfo when parsing PKCS#7     structures. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a     denial of service, or execute arbitrary code. (CVE-2015-0289)

    Robert Dugal and David Ramos discovered that OpenSSL incorrectly handled decoding Base64 encoded data. A     remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service,     or execute arbitrary code. (CVE-2015-0292)

    Sean Burford and Emilia Ksper discovered that OpenSSL incorrectly handled specially crafted SSLv2     CLIENT-MASTER-KEY messages. A remote attacker could possibly use this issue to cause OpenSSL to crash,     resulting in a denial of service. (CVE-2015-0293)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

OpenSSL was updated to fix various security issues.

Following security issues were fixed :

  - CVE-2015-0209: A Use After Free following     d2i_ECPrivatekey error was fixed which could lead to     crashes for attacker supplied Elliptic Curve keys. This     could be exploited over SSL connections with client     supplied keys.

  - CVE-2015-0286: A segmentation fault in ASN1_TYPE_cmp was     fixed that could be exploited by attackers when e.g.
    client authentication is used. This could be exploited     over SSL connections.

  - CVE-2015-0287: A ASN.1 structure reuse memory corruption     was fixed. This problem can not be exploited over     regular SSL connections, only if specific client     programs use specific ASN.1 routines.

  - CVE-2015-0288: A X509_to_X509_REQ NULL pointer     dereference was fixed, which could lead to crashes. This     function is not commonly used, and not reachable over     SSL methods.

  - CVE-2015-0289: Several PKCS7 NULL pointer dereferences     were fixed, which could lead to crashes of programs     using the PKCS7 APIs. The SSL apis do not use those by     default.

  - CVE-2015-0293: Denial of service via reachable assert in     SSLv2 servers, could be used by remote attackers to     terminate the server process. Note that this requires     SSLv2 being allowed, which is not the default.

Updated OpenSSL packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, as well as a full-strength, general purpose cryptography library.

  - An invalid pointer use flaw was found in OpenSSL's     ASN1_TYPE_cmp() function. A remote attacker could crash     a TLS/SSL client or server using OpenSSL via a specially     crafted X.509 certificate when the attacker-supplied     certificate was verified by the application.
    (CVE-2015-0286)

  - An integer underflow flaw, leading to a buffer overflow,     was found in the way OpenSSL decoded malformed     Base64-encoded inputs. An attacker able to make an     application using OpenSSL decode a specially crafted     Base64-encoded input (such as a PEM file) could use this     flaw to cause the application to crash. Note: this flaw     is not exploitable via the TLS/SSL protocol because the     data being transferred is not Base64-encoded.
    (CVE-2015-0292)

  - A denial of service flaw was found in the way OpenSSL     handled SSLv2 handshake messages. A remote attacker     could use this flaw to cause a TLS/SSL server using     OpenSSL to exit on a failed assertion if it had both     the SSLv2 protocol and EXPORT-grade cipher suites     enabled. (CVE-2015-0293)

  - A use-after-free flaw was found in the way OpenSSL     imported malformed Elliptic Curve private keys. A     specially crafted key file could cause an application     using OpenSSL to crash when imported. (CVE-2015-0209)

  - An out-of-bounds write flaw was found in the way OpenSSL     reused certain ASN.1 structures. A remote attacker could     possibly use a specially crafted ASN.1 structure that,     when parsed by an application, would cause that     application to crash. (CVE-2015-0287)

  - A NULL pointer dereference flaw was found in OpenSSL's     X.509 certificate handling implementation. A specially     crafted X.509 certificate could cause an application     using OpenSSL to crash if the application attempted to     convert the certificate to a certificate request.
    (CVE-2015-0288)

  - A NULL pointer dereference was found in the way OpenSSL     handled certain PKCS#7 inputs. An attacker able to make     an application using OpenSSL verify, decrypt, or parse a     specially crafted PKCS#7 input could cause that     application to crash. TLS/SSL clients and servers using     OpenSSL were not affected by this flaw. (CVE-2015-0289)

Red Hat would like to thank the OpenSSL project for reporting CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0292, and CVE-2015-0293. Upstream acknowledges Stephen Henson of the OpenSSL development team as the original reporter of CVE-2015-0286, Emilia Käsper of the OpenSSL development team as the original reporter of CVE-2015-0287, Brian Carpenter as the original reporter of CVE-2015-0288, Michal Zalewski of Google as the original reporter of CVE-2015-0289, Robert Dugal and David Ramos as the original reporters of CVE-2015-0292, and Sean Burford of Google and Emilia Käsper of the OpenSSL development team as the original reporters of CVE-2015-0293.

All OpenSSL users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.

A use-after-free flaw was found in the way OpenSSL importrf certain Elliptic Curve private keys. An attacker could use this flaw to crash OpenSSL, if a specially crafted certificate was imported.
(CVE-2015-0209)

A denial of service flaw was found in the way OpenSSL handled certain SSLv2 messages. A malicious client could send a specially crafted SSLv2 CLIENT-MASTER-KEY message that would cause an OpenSSL server that both supports SSLv2 and enables EXPORT-grade cipher suites to crash. (CVE-2015-0293)

An out-of-bounds write flaw was found in the way OpenSSL reused certain ASN.1 structures. A remote attacker could use a specially crafted ASN.1 structure that, when parsed by an application, would cause that application to crash. (CVE-2015-0287)

A flaw was found in the the ASN (Abstract Syntax Notation) parsing code of OpenSSL. An attacker could present a specially crafted certificate, which when verified by an OpenSSL client or server could cause it to crash. (CVE-2015-0286)

A NULL pointer dereference was found in the way OpenSSL handled certain PKCS#7 blobs. An attacker could cause OpenSSL to crash, when applications verify, decrypt or parsed these ASN.1 encoded PKCS#7 blobs. OpenSSL clients and servers are not affected. (CVE-2015-0289)

A NULL pointer dereference flaw was found in OpenSSL's x509 certificate handling implementation. A remote attacker could use this flaw to crash an OpenSSL server using an invalid certificate key.
(CVE-2015-0288)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
125001	EulerOS Virtualization 3.0.1.0 : openssl (EulerOS-SA-2019-1548)	Nessus	Huawei Local Security Checks	2019/5/14	2022/12/5	medium
90525	Cisco IOS Multiple OpenSSL Vulnerabilities (CSCut46130)	Nessus	CISCO	2016/4/14	2019/11/19	high
82494	RHEL 6 : openssl (RHSA-2015:0752)	Nessus	Red Hat Local Security Checks	2015/4/1	2025/2/18	high
82922	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : openssl (SSA:2015-111-09)	Nessus	Slackware Local Security Checks	2015/4/22	2021/1/14	medium
83527	Apache Tomcat 8.0.x < 8.0.21 Multiple Vulnerabilities (FREAK)	Nessus	Web Servers	2015/5/19	2024/5/6	high
83703	SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2015:0541-1)	Nessus	SuSE Local Security Checks	2015/5/20	2021/1/6	medium
84488	Mac OS X 10.10.x < 10.10.4 Multiple Vulnerabilities (GHOST) (Logjam)	Nessus	MacOS X Local Security Checks	2015/7/1	2024/5/28	critical
81962	FreeBSD : OpenSSL -- multiple vulnerabilities (9d15355b-ce7c-11e4-9db0-d050992ecde8) (FREAK)	Nessus	FreeBSD Local Security Checks	2015/3/20	2021/1/6	high
81971	Ubuntu 14.04 LTS : OpenSSL vulnerabilities (USN-2537-1)	Nessus	Ubuntu Local Security Checks	2015/3/20	2024/8/27	critical
81995	openSUSE Security Update : openssl (openSUSE-2015-247)	Nessus	SuSE Local Security Checks	2015/3/23	2021/1/19	medium
81997	CentOS 6 : openssl (CESA-2015:0715)	Nessus	CentOS Local Security Checks	2015/3/24	2021/1/4	high
82047	Amazon Linux AMI : openssl (ALAS-2015-498)	Nessus	Amazon Linux Local Security Checks	2015/3/25	2018/4/18	medium

検出

プラグインの検索

medium

high

high

medium

high

medium

critical

high

critical

medium

high

medium