The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0208 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)

    * OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817)

    * openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or     parameters may be very slow (CVE-2023-5678)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * openssl: Excessive time spent checking DH q parameter value (JIRA:RHEL-14237)

    * openssl: Excessive time spent checking DH keys and parameters (JIRA:RHEL-14243)

    * openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or     parameters may be very slow (JIRA:RHEL-16536)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12056 advisory.

    - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series       (a proper fix for CVE-2020-25659)       Resolves: RHEL-17696
    - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking       excessively long X9.42 DH keys or parameters may be very slow       Resolves: RHEL-16538
    - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters       Resolves: RHEL-14245

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0154 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)

    * OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817)

    * openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or     parameters may be very slow (CVE-2023-5678)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * openssl: Excessive time spent checking DH q parameter value (JIRA:RHEL-14238)

    * openssl: Excessive time spent checking DH keys and parameters (JIRA:RHEL-14244)

    * openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or     parameters may be very slow (JIRA:RHEL-16537)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0047 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-3446:
    Issue summary: Checking excessively long DH keys or parameters may be very slow.
    Impact summary: Applications that use the functions DH_check(), DH_check_ex()     or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long     delays. Where the key or parameters that are being checked have been obtained     from an untrusted source this may lead to a Denial of Service.
    The function DH_check() performs various checks on DH parameters. One of those     checks confirms that the modulus ('p' parameter) is not too large. Trying to use     a very large modulus is slow and OpenSSL will not normally use a modulus which     is over 10,000 bits in length.
    However the DH_check() function checks numerous aspects of the key or parameters     that have been supplied. Some of those checks use the supplied modulus value     even if it has already been found to be too large.
    An application that calls DH_check() and supplies a key or parameters obtained     from an untrusted source could be vulernable to a Denial of Service attack.
    The function DH_check() is itself called by a number of other OpenSSL functions.
    An application calling any of those other functions may similarly be affected.
    The other functions affected by this are DH_check_ex() and     EVP_PKEY_param_check().
    Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications     when using the '-check' option.
    The OpenSSL SSL/TLS implementation is not affected by this issue.
    The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.

    CVE-2023-3817:
    Issue summary: Checking excessively long DH keys or parameters may be very slow.
    Impact summary: Applications that use the functions DH_check(), DH_check_ex()     or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long     delays. Where the key or parameters that are being checked have been obtained     from an untrusted source this may lead to a Denial of Service.
    The function DH_check() performs various checks on DH parameters. After fixing     CVE-2023-3446 it was discovered that a large q parameter value can also trigger     an overly long computation during some of these checks. A correct q value,     if present, cannot be larger than the modulus p parameter, thus it is     unnecessary to perform these checks if q is larger than p.
    An application that calls DH_check() and supplies a key or parameters obtained     from an untrusted source could be vulnerable to a Denial of Service attack.
    The function DH_check() is itself called by a number of other OpenSSL functions.
    An application calling any of those other functions may similarly be affected.
    The other functions affected by this are DH_check_ex() and     EVP_PKEY_param_check().
    Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications     when using the -check option.
    The OpenSSL SSL/TLS implementation is not affected by this issue.
    The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.

    CVE-2023-5678:
    Issue summary: Generating excessively long X9.42 DH keys or checking     excessively long X9.42 DH keys or parameters may be very slow.
    Impact summary: Applications that use the functions DH_generate_key() to     generate an X9.42 DH key may experience long delays.  Likewise, applications     that use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()     to check an X9.42 DH key or X9.42 DH parameters may experience long delays.
    Where the key or parameters that are being checked have been obtained from     an untrusted source this may lead to a Denial of Service.
    While DH_check() performs all the necessary checks (as of CVE-2023-3817),     DH_check_pub_key() doesn't make any of these checks, and is therefore     vulnerable for excessively large P and Q parameters.
    Likewise, while DH_generate_key() performs a check for an excessively large     P, it doesn't check for an excessively large Q.
    An application that calls DH_generate_key() or DH_check_pub_key() and     supplies a key or parameters obtained from an untrusted source could be     vulnerable to a Denial of Service attack.
    DH_generate_key() and DH_check_pub_key() are also called by a number of     other OpenSSL functions.  An application calling any of those other     functions may similarly be affected.  The other functions affected by this     are DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().
    Also vulnerable are the OpenSSL pkey command line application when using the
    -pubcheck option, as well as the OpenSSL genpkey command line application.
    The OpenSSL SSL/TLS implementation is not affected by this issue.
    The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:7877 advisory.

    * openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)

    * OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817)

    * openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or     parameters may be very slow (CVE-2023-5678)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1207 advisory.

    This advisory aggregates security fixes for the openssl SRPM in CIQ FIPS 8.6 Certified. It addresses 27     CVEs: CVE-2006-4343, CVE-2007-3108, CVE-2022-4304, CVE-2023-0215, CVE-2006-2940, and 22 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2024-0304 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
187967	RHEL 8 : openssl (RHSA-2024:0208)	Nessus	Red Hat Local Security Checks	2024/1/11	2024/11/8	critical
188028	Oracle Linux 8 : openssl (ELSA-2024-12056)	Nessus	Oracle Linux Local Security Checks	2024/1/12	2025/9/9	medium
189665	RHEL 8 : openssl (RHSA-2024:0154)	Nessus	Red Hat Local Security Checks	2024/1/26	2024/11/7	critical
236212	Alibaba Cloud Linux 3 : 0047: openssl (ALINUX3-SA-2024:0047)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	critical
277368	RockyLinux 8 : openssl (RLSA-2023:7877)	Nessus	Rocky Linux Local Security Checks	2025/12/4	2025/12/4	medium
354370	Rocky Linux 8.6 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (ciqsa-2026_1207)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
194921	Splunk Universal Forwarder 9.0.0 < 9.0.9, 9.1.0 < 9.1.4, 9.2.0 < 9.2.1 (SVD-2024-0304)	Nessus	CGI abuses	2024/5/2	2025/11/5	critical

検出

プラグインの検索

critical

medium

critical

critical

medium

high

critical