The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0996 advisory.

    - fix CVE-2016-2105 - possible overflow in base64 encoding
    - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
    - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
    - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
    - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
    - fix CVE-2016-0799 - memory issues in BIO_printf
    - fix CVE-2016-0702 - side channel attack on modular exponentiation
    - fix CVE-2016-0705 - double-free in DSA private key parsing
    - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn
    - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
    - fix CVE-2015-7575 - disallow use of MD5 in TLS1.2
    - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
    - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle E-Business installed on the remote host is missing the October 2016 Oracle Critical Patch Update (CPU). It is, therefore, affected by multiple vulnerabilities :

  - A heap buffer overflow condition exists in the OpenSSL     subcomponent in the EVP_EncodeUpdate() function within     file crypto/evp/encode.c that is triggered when handling     a large amount of input data. An unauthenticated, remote     attacker can exploit this to cause a denial of service     condition. (CVE-2016-2105)

  - A heap buffer overflow condition exists in the OpenSSL     subcomponent in the EVP_EncryptUpdate() function within     file crypto/evp/evp_enc.c that is triggered when     handling a large amount of input data after a previous     call occurs to the same function with a partial block.
    An unauthenticated, remote attacker can exploit this to     cause a denial of service condition. (CVE-2016-2106)

  - Multiple flaws exist in the OpenSSL subcomponent in the     aesni_cbc_hmac_sha1_cipher() function in file     crypto/evp/e_aes_cbc_hmac_sha1.c and the     aesni_cbc_hmac_sha256_cipher() function in file     crypto/evp/e_aes_cbc_hmac_sha256.c that are triggered     when the connection uses an AES-CBC cipher and AES-NI     is supported by the server. A man-in-the-middle attacker     can exploit these to conduct a padding oracle attack,     resulting in the ability to decrypt the network traffic.
    (CVE-2016-2107)

  - Multiple unspecified flaws exist in the OpenSSL     subcomponent in the d2i BIO functions when reading ASN.1     data from a BIO due to invalid encoding causing a large     allocation of memory. An unauthenticated, remote     attacker can exploit these to cause a denial of service     condition through resource exhaustion. (CVE-2016-2109)

  - An out-of-bounds read error exists in the OpenSSL     subcomponent in the X509_NAME_oneline() function within     file crypto/x509/x509_obj.c when handling very long ASN1     strings. An unauthenticated, remote attacker can exploit     this to disclose the contents of stack memory.
    (CVE-2016-2176)

  - An unspecified flaw exists in the Runtime Catalog     subcomponent in the iStore component that allows an     unauthenticated, remote attacker to impact     confidentiality and integrity. (CVE-2016-5489)

  - An unspecified flaw exists in the AD Utilities     subcomponent in the Applications DBA component that     allows a local attacker to disclose sensitive     information. (CVE-2016-5517)  
  - An unspecified flaw exists in the Workflow Events     subcomponent in the Shipping Execution component that     allows an unauthenticated, remote attacker to disclose     sensitive information. (CVE-2016-5532)

  - An unspecified flaw exists in the Price Book     subcomponent in the Advanced Pricing component that     allows an unauthenticated, remote attacker to impact     confidentiality and integrity. (CVE-2016-5557)

  - An unspecified flaw exists in the Requisition Management     subcomponent in the iProcurement component that allows     an unauthenticated, remote attacker to impact     confidentiality and integrity. (CVE-2016-5562)

  - Multiple unspecified flaws exist in the AD Utilities     subcomponent in the DBA component that allow an     authenticated, remote attacker to impact confidentiality     and integrity. (CVE- 2016-5567, CVE-2016-5570,     CVE-2016-5571)

  - An unspecified flaw exists in the Resources Module     subcomponent in the Common Applications Calendar     component that allows an unauthenticated, remote     attacker to disclose sensitive information.
    (CVE-2016-5575)

  - An unspecified flaw exists in the Candidate Self Service     subcomponent in the iRecruitment component that allows a     local attacker to gain elevated privileges.
    (CVE-2016-5581)

  - An unspecified flaw exists in the File Upload     subcomponent in the One-to-One Fulfillment component     that allows an unauthenticated, remote attacker to     impact integrity. (CVE-2016-5583)

  - An unspecified flaw exists in the Select Application     Dependencies subcomponent in the Interaction Center     Intelligence component that allow an unauthenticated,     remote attacker to impact confidentiality and integrity.
    (CVE-2016-5585)

  - An unspecified flaw exists in the Dispatch/Service Call     Requests subcomponent in the Email Center component that     allow an unauthenticated, remote attacker to impact     confidentiality and integrity. (CVE-2016-5586)

  - Multiple unspecified flaws exist in the Outcome-Result     subcomponent in the Customer Interaction History     component that allow an unauthenticated, remote     attacker to impact confidentiality and integrity.
    (CVE-2016-5587, CVE-2016-5591, CVE-2016-5593)

  - An unspecified flaw exists in the Responsibility     Management subcomponent in the CRM Technical Foundation     component that allows an unauthenticated, remote     attacker to impact confidentiality and integrity.
    (CVE-2016-5589)

  - Multiple unspecified flaws exist in the Result-Reason     subcomponent in the Customer Interaction History     component that allow an unauthenticated, remote attacker     to impact confidentiality and integrity. (CVE-2016-5592,     CVE-2016-5595)

  - An unspecified flaw exists in the Default Responsibility     subcomponent in the CRM Technical Foundation component     that allows an unauthenticated, remote attacker to     disclose sensitive information. (CVE-2016-5596)

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.6. It is, therefore, affected by multiple vulnerabilities in the following components :

  - apache_mod_php
  - Audio
  - bsdiff
  - CFNetwork
  - CoreGraphics
  - FaceTime
  - Graphics Drivers
  - ImageIO
  - Intel Graphics Driver
  - IOHIDFamily
  - IOKit
  - IOSurface
  - Kernel
  - libc++abi
  - libexpat
  - LibreSSL
  - libxml2
  - libxslt
  - Login Window
  - OpenSSL
  - QuickTime
  - Safari Login AutoFill
  - Sandbox Profiles

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

Several vulnerabilities were discovered in OpenSSL, a Secure Socket Layer toolkit.

CVE-2016-2105

Guido Vranken discovered that an overflow can occur in the function EVP_EncodeUpdate(), used for Base64 encoding, if an attacker can supply a large amount of data. This could lead to a heap corruption.

CVE-2016-2106

Guido Vranken discovered that an overflow can occur in the function EVP_EncryptUpdate() if an attacker can supply a large amount of data.
This could lead to a heap corruption.

CVE-2016-2107

Juraj Somorovsky discovered a padding oracle in the AES CBC cipher implementation based on the AES-NI instruction set. This could allow an attacker to decrypt TLS traffic encrypted with one of the cipher suites based on AES CBC.

CVE-2016-2108

David Benjamin from Google discovered that two separate bugs in the ASN.1 encoder, related to handling of negative zero integer values and large universal tags, could lead to an out-of-bounds write.

CVE-2016-2109

Brian Carpenter discovered that when ASN.1 data is read from a BIO using functions such as d2i_CMS_bio(), a short invalid encoding can casuse allocation of large amounts of memory potentially consuming excessive resources or exhausting memory.

CVE-2016-2176

Guido Vranken discovered that ASN.1 Strings that are over 1024 bytes can cause an overread in applications using the X509_NAME_oneline() function on EBCDIC systems. This could result in arbitrary stack data being returned in the buffer.

Additional information about these issues can be found in the OpenSSL security advisory at https://www.openssl.org/news/secadv/20160503.txt

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

OpenSSL reports :

Memory corruption in the ASN.1 encoder

Padding oracle in AES-NI CBC MAC check

EVP_EncodeUpdate overflow

EVP_EncryptUpdate overflow

ASN.1 BIO excessive memory allocation

EBCDIC overread (OpenSSL only)

The remote OracleVM system is missing necessary patches to address critical security updates :

  - fix CVE-2016-2105 - possible overflow in base64 encoding

  - fix CVE-2016-2106 - possible overflow in     EVP_EncryptUpdate

  - fix CVE-2016-2107 - padding oracle in stitched AES-NI     CBC-MAC

  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder

  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data     from BIO

  - fix CVE-2016-0799 - memory issues in BIO_printf

  - fix CVE-2016-0702 - side channel attack on modular     exponentiation

  - fix CVE-2016-0705 - double-free in DSA private key     parsing

  - fix CVE-2016-0797 - heap corruption in BN_hex2bn and     BN_dec2bn

  - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement

  - disable SSLv2 in the generic TLS method

  - fix 1-byte memory leak in pkcs12 parse (#1229871)

  - document some options of the speed command (#1197095)

  - fix high-precision timestamps in timestamping authority

  - fix CVE-2015-7575 - disallow use of MD5 in TLS1.2

  - fix CVE-2015-3194 - certificate verify crash with     missing PSS parameter

  - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak

  - fix CVE-2015-3196 - race condition when handling PSK     identity hint

The version of Citrix XenServer running on the remote host is affected by multiple vulnerabilities in the bundled versions of OpenSSL and QEMU :

  - Multiple flaws exist in the bundled version of OpenSSL     in the aesni_cbc_hmac_sha1_cipher() and     aesni_cbc_hmac_sha256_cipher() functions that are     triggered when the connection uses an AES-CBC cipher and     AES-NI is supported by the server. A man-in-the-middle     attacker can exploit these issues to conduct a padding     oracle attack, resulting in the ability to decrypt the     network traffic. (CVE-2016-2107)

  - A remote code execution vulnerability exists in the     bundled version of OpenSSL in the ASN.1 encoder     component due to an underflow condition that occurs when     attempting to encode the value zero represented as a     negative integer. An unauthenticated, remote attacker     can exploit this to corrupt memory, resulting in the     execution of arbitrary code. (CVE-2016-2108)

  - An out-of-bounds write error exists in the bundled     version of QEMU in the vga_update_memory_access()     function that is triggered when access nodes are changed     after the register bank has been set. An attacker on the     guest can exploit this to execute arbitrary code with     the privileges of the host's QEMU process.
    (CVE-2016-3710)

  - An integer overflow condition exists in the bundled     version of QEMU in the vbe_update_vgaregs() function     that is triggered when setting certain VGA registers     while in VBE mode. An attacker on the guest can     exploit this to crash the host's QEMU process.
    (CVE-2016-3712)

The self-reported SGOS version installed on the remote Blue Coat ProxySG device is 6.5.x prior to 6.5.9.8 or 6.6.x prior to 6.6.4.1. It is, therefore, affected by multiple vulnerabilities in its bundled version of OpenSSL :

  - Multiple flaws exist in the aesni_cbc_hmac_sha1_cipher()     function in file crypto/evp/e_aes_cbc_hmac_sha1.c and     the aesni_cbc_hmac_sha256_cipher() function in file     crypto/evp/e_aes_cbc_hmac_sha256.c that are triggered     when the connection uses an AES-CBC cipher and AES-NI     is supported by the server. A man-in-the-middle attacker     can exploit these to conduct a padding oracle attack,     resulting in the ability to decrypt the network traffic.
    Note that this issue does not affect the SG300 and SG600     hardware platforms. (CVE-2016-2107)

  - A remote code execution vulnerability exists in the     ASN.1 encoder due to an underflow condition that occurs     when attempting to encode the value zero represented as     a negative integer. An unauthenticated, remote attacker     can exploit this to corrupt memory, resulting in the     execution of arbitrary code. (CVE-2016-2108)

  - Multiple unspecified flaws exist in the d2i BIO     functions when reading ASN.1 data from a BIO due to     invalid encoding causing a large allocation of memory.
    An unauthenticated, remote attacker can exploit these to     cause a denial of service condition through resource     exhaustion. Note that this issue only affects management     connections. (CVE-2016-2109)

An update for openssl is now available for Red Hat Enterprise Linux 6.7 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es) :

* A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library. (CVE-2016-2108)

* Two integer overflow flaws, leading to buffer overflows, were found in the way the EVP_EncodeUpdate() and EVP_EncryptUpdate() functions of OpenSSL parsed very large amounts of input data. A remote attacker could use these flaws to crash an application using OpenSSL or, possibly, execute arbitrary code with the permissions of the user running that application. (CVE-2016-2105, CVE-2016-2106)

* It was discovered that OpenSSL leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when the connection used the AES CBC cipher suite and the server supported AES-NI. A remote attacker could possibly use this flaw to retrieve plain text from encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2016-2107)

* Several flaws were found in the way BIO_*printf functions were implemented in OpenSSL. Applications which passed large amounts of untrusted data through these functions could crash or potentially execute code with the permissions of the user running such an application. (CVE-2016-0799, CVE-2016-2842)

* A denial of service flaw was found in the way OpenSSL parsed certain ASN.1-encoded data from BIO (OpenSSL's I/O abstraction) inputs. An application using OpenSSL that accepts untrusted ASN.1 BIO input could be forced to allocate an excessive amount of data. (CVE-2016-2109)

Red Hat would like to thank the OpenSSL project for reporting CVE-2016-2108, CVE-2016-2842, CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, and CVE-2016-0799. Upstream acknowledges Huzaifa Sidhpurwala (Red Hat), Hanno Bock, and David Benjamin (Google) as the original reporters of CVE-2016-2108; Guido Vranken as the original reporter of CVE-2016-2842, CVE-2016-2105, CVE-2016-2106, and CVE-2016-0799; and Juraj Somorovsky as the original reporter of CVE-2016-2107.

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session, NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169. (CVE-2016-2107)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
91152	Oracle Linux 6 : openssl (ELSA-2016-0996)	Nessus	Oracle Linux Local Security Checks	2016/5/16	2024/10/22	critical
94164	Oracle E-Business Multiple Vulnerabilities (October 2016 CPU)	Nessus	Misc.	2016/10/20	2026/1/21	high
92496	Mac OS X 10.11.x < 10.11.6 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2016/7/21	2024/5/28	critical
90874	Debian DLA-456-1 : openssl security update	Nessus	Debian Local Security Checks	2016/5/4	2021/1/11	critical
90876	FreeBSD : OpenSSL -- multiple vulnerabilities (01d729ca-1143-11e6-b55e-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	2016/5/4	2021/1/4	critical
91154	OracleVM 3.3 / 3.4 : openssl (OVMSA-2016-0049) (SLOTH)	Nessus	OracleVM Local Security Checks	2016/5/16	2021/1/4	critical
91352	Citrix XenServer Multiple Vulnerabilities (CTX212736)	Nessus	Misc.	2016/5/27	2018/7/6	critical
93381	Blue Coat ProxySG 6.5.x < 6.5.9.8 / 6.6.x < 6.6.4.1 Multiple OpenSSL Vulnerabilities	Nessus	Firewalls	2016/9/8	2026/1/27	critical
94105	RHEL 6 : openssl (RHSA-2016:2073)	Nessus	Red Hat Local Security Checks	2016/10/18	2026/1/21	critical
94986	F5 Networks BIG-IP : OpenSSL vulnerability (K93600123)	Nessus	F5 Networks Local Security Checks	2016/11/21	2026/10/21	medium

検出

プラグインの検索

critical

high

critical

critical

critical

critical

critical

critical

critical

medium