According to its self-reported version, the Tenable Sensor Proxy application running on the remote host is version 1.0.6. It is, therefore, affected by multiple vulnerabilities in OpenSSL prior to version 1.1.1t:
    
    - An attacker that had observed a genuine connection between a client and a server could use the flaw to       send trial messages to the server and record the time taken to process them. After a sufficiently large       number of messages the attacker could recover the pre-master secret used for the original connection.       (CVE-2022-4304)

    - The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes any header data and       the payload data. Under certain conditions, a double free will occur. This will most likely lead to       a crash. (CVE-2022-4450)

    - The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO.       Under certain conditions, the BIO chain is not properly cleaned up and the BIO passed by the caller       still retains internal pointers to the previously freed filter BIO. This will most likely result       in a crash. (CVE-2023-0215)

    - AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not       encrypt the entirety of the data under some circumstances. In the special case of in place encryption,       sixteen bytes of the plaintext would be revealed. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4).       Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p). (CVE-2022-2097)         Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2308-1 advisory.

  - The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This     script is distributed by some operating systems in a manner where it is automatically executed. On such     operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of     the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool.
    Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n).
    Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd). (CVE-2022-1292)

  - In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances     where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection     were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other     places in the script where the file names of certificates being hashed were possibly passed to a command     executed through the shell. This script is distributed by some operating systems in a manner where it is     automatically executed. On such operating systems, an attacker could execute arbitrary commands with the     privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the     OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in     OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze). (CVE-2022-2068)

  - AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt     the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was     preexisting in the memory that wasn't written. In the special case of in place encryption, sixteen bytes     of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and     DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q     (Affected 1.1.1-1.1.1p). (CVE-2022-2097)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5818 advisory.

    - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86       Resolves: CVE-2022-2097
    - Fix CVE-2022-1292: openssl: c_rehash script allows command injection       Resolves: rhbz#2090371

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6224 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: c_rehash script allows command injection (CVE-2022-1292)

    * openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS     (CVE-2022-1343)

    * openssl: OPENSSL_LH_flush() breaks reuse of memory (CVE-2022-1473)

    * openssl: the c_rehash script allows command injection (CVE-2022-2068)

    * openssl: AES OCB fails to encrypt some bytes (CVE-2022-2097)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * openssl occasionally sends internal error to gnutls when using FFDHE (BZ#2080323)

    * openssl req defaults to 3DES (BZ#2085499)

    * OpenSSL accepts custom elliptic curve parameters when p is large [rhel-9] (BZ#2085508)

    * OpenSSL mustn't work with ECDSA with explicit curve parameters in FIPS mode (BZ#2085521)

    * openssl s_server -groups secp256k1 in FIPS fails because X25519/X448 (BZ#2086554)

    * Converting FIPS power-on self test to KAT (BZ#2086866)

    * Small RSA keys work for some operations in FIPS mode (BZ#2091938)

    * FIPS provider doesn't block RSA encryption for key transport (BZ#2091977)

    * OpenSSL testsuite certificates expired (BZ#2095696)

    * [IBM 9.1 HW OPT] POWER10 performance enhancements for cryptography: OpenSSL (BZ#2103044)

    * [FIPS lab review] self-test (BZ#2112978)

    * [FIPS lab review] DH tuning (BZ#2115856)

    * [FIPS lab review] EC tuning (BZ#2115857)

    * [FIPS lab review] RSA tuning (BZ#2115858)

    * [FIPS lab review] RAND tuning (BZ#2115859)

    * [FIPS lab review] zeroization (BZ#2115861)

    * [FIPS lab review] HKDF limitations (BZ#2118388)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This     script is distributed by some operating systems in a manner where it is automatically executed. On such     operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of     the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool.
    Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n).
    Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd). (CVE-2022-1292)

  - In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances     where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection     were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other     places in the script where the file names of certificates being hashed were possibly passed to a command     executed through the shell. This script is distributed by some operating systems in a manner where it is     automatically executed. On such operating systems, an attacker could execute arbitrary commands with the     privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the     OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in     OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze). (CVE-2022-2068)

  - AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt     the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was     preexisting in the memory that wasn't written. In the special case of 'in place' encryption, sixteen bytes     of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and     DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q     (Affected 1.1.1-1.1.1p). (CVE-2022-2097)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0640 advisory.

    This advisory aggregates security fixes for the openssl SRPM in CIQ FIPS 8.10 Compliant. It addresses 27     CVEs: CVE-2006-4343, CVE-2007-3108, CVE-2022-4304, CVE-2023-0215, CVE-2006-2940, and 22 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0127 advisory.

    This advisory aggregates security fixes for the openssl SRPM in CIQ LTS 8.6. It addresses 52 CVEs:
    CVE-2010-0742, CVE-2023-0215, CVE-2015-0286, CVE-2020-25659, CVE-2006-3738, and 47 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
173397	Tenable Sensor Proxy < 1.0.7 Multiple Vulnerabilities (TNS-2023-15)	Nessus	Misc.	2023/3/24	2023/4/20	medium
162926	SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2022:2308-1)	Nessus	SuSE Local Security Checks	2022/7/8	2025/9/4	high
163744	Oracle Linux 8 : openssl (ELSA-2022-5818)	Nessus	Oracle Linux Local Security Checks	2022/8/2	2025/9/4	high
164507	RHEL 9 : openssl (RHSA-2022:6224)	Nessus	Red Hat Local Security Checks	2022/8/30	2025/9/4	high
165405	EulerOS Virtualization 2.9.0 : openssl (EulerOS-SA-2022-2396)	Nessus	Huawei Local Security Checks	2022/9/24	2025/9/4	high
354263	Rocky Linux 8 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (ciqsa-2026_0640)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
354509	Rocky Linux 8.6 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (ciqsa-2026_0127)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/13	high

検出

プラグインの検索

medium

high

high

high

high

high

high