Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verification mode is set. Impact summary: TLS and DTLS connections using raw public keys may be vulnerable to man-in-middle attacks when server authentication failure is not detected by clients. RPKs are disabled by default in both TLS clients and TLS servers. The issue only arises when TLS clients explicitly enable RPK use by the server, and the server, likewise, enables sending of an RPK instead of an X.509 certificate chain. The affected clients are those that then rely on the handshake to fail when the server's RPK fails to match one of the expected public keys, by setting the verification mode to SSL_VERIFY_PEER. Clients that enable server-side raw public keys can still find out that raw public key verification failed by calling SSL_get_verify_result(), and those that do, and take appropriate action, are not affected. This issue was introduced in the initial implementation of RPK support in OpenSSL 3.2. The FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-becf280371 advisory.

    Rebase to 3.2.4

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of cloud-hypervisor-cvm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-12797 advisory.

  - Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server May fail to notice     that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER     verification mode is set. Impact summary: TLS and DTLS connections using raw public keys May be vulnerable     to man-in-middle attacks when server authentication failure is not detected by clients. RPKs are disabled     by default in both TLS clients and TLS servers. The issue only arises when TLS clients explicitly enable     RPK use by the server, and the server, likewise, enables sending of an RPK instead of an X.509 certificate     chain. The affected clients are those that then rely on the handshake to fail when the server's RPK fails     to match one of the expected public keys, by setting the verification mode to SSL_VERIFY_PEER. Clients     that enable server-side raw public keys can still find out that raw public key verification failed by     calling SSL_get_verify_result(), and those that do, and take appropriate action, are not affected. This     issue was introduced in the initial implementation of RPK support in OpenSSL 3.2. The FIPS modules in 3.4,     3.3, 3.2, 3.1 and 3.0 are not affected by this issue. (CVE-2024-12797)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of cloud-hypervisor-cvm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-12797 advisory.

  - Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server May fail to notice     that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER     verification mode is set. Impact summary: TLS and DTLS connections using raw public keys May be vulnerable     to man-in-middle attacks when server authentication failure is not detected by clients. RPKs are disabled     by default in both TLS clients and TLS servers. The issue only arises when TLS clients explicitly enable     RPK use by the server, and the server, likewise, enables sending of an RPK instead of an X.509 certificate     chain. The affected clients are those that then rely on the handshake to fail when the server's RPK fails     to match one of the expected public keys, by setting the verification mode to SSL_VERIFY_PEER. Clients     that enable server-side raw public keys can still find out that raw public key verification failed by     calling SSL_get_verify_result(), and those that do, and take appropriate action, are not affected. This     issue was introduced in the initial implementation of RPK support in OpenSSL 3.2. The FIPS modules in 3.4,     3.3, 3.2, 3.1 and 3.0 are not affected by this issue. (CVE-2024-12797)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e0e44b1b98 advisory.

    Rebase to 3.2.4, fix CVE-2024-12797

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:1330 advisory.

    * openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1330 advisory.

    [3.2.2-6.0.1.1]
    - Enable openssl-fips-provider dependency [Orabug: 36504822]
    - Temporary disable openssl-fips-provider dependency [Orabug: 36504822]
    - Replace upstream references [Orabug: 34340177]

    [1:3.2.2-6.1]
    - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)       Resolves: RHEL-76755

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7264-1 advisory.

    It was discovered that OpenSSL clients incorrectly handled authenticating servers using RFC7250 Raw Public     Keys. In certain cases, the connection will not abort as expected, possibly causing the communication to     be intercepted. (CVE-2024-12797)

    George Pantelakis and Alicja Kario discovered that OpenSSL had a timing side-channel when performing ECDSA     signature computations. A remote attacker could possibly use this issue to recover private data.
    (CVE-2024-13176)

    It was discovered that OpenSSL incorrectly handled certain memory operations when using low-level GF(2^m)     elliptic curve APIs with untrusted explicit values for the field polynomial. When being used in this     uncommon fashion, a remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial     of service, or possibly execute arbitrary code. (CVE-2024-9143)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a64761a1-e895-11ef-873e-8447094a420f advisory.

    The OpenSSL project reports:
    RFC7250 handshakes with unauthenticated servers don't abort as expected (High).
                Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that     the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER     verification mode is set.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1330 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
216838	Fedora 40 : openssl (2025-becf280371)	Nessus	Fedora Local Security Checks	medium
216786	Azure Linux 3.0 Security Update: cloud-hypervisor-cvm (CVE-2024-12797)	Nessus	Azure Linux Local Security Checks	medium
216627	CBL Mariner 2.0 Security Update: cloud-hypervisor-cvm (CVE-2024-12797)	Nessus	MarinerOS Local Security Checks	medium
216257	Fedora 41 : openssl (2025-e0e44b1b98)	Nessus	Fedora Local Security Checks	medium
216246	AlmaLinux 9 : openssl (ALSA-2025:1330)	Nessus	Alma Linux Local Security Checks	medium
216215	Oracle Linux 9 : openssl (ELSA-2025-1330)	Nessus	Oracle Linux Local Security Checks	medium
216159	Ubuntu 24.10 : OpenSSL vulnerabilities (USN-7264-1)	Nessus	Ubuntu Local Security Checks	high
216145	FreeBSD : OpenSSL -- Man-in-the-Middle vulnerability (a64761a1-e895-11ef-873e-8447094a420f)	Nessus	FreeBSD Local Security Checks	medium
216104	RHEL 9 : openssl (RHSA-2025:1330)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2024-12797

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

high

medium

medium