The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3692-1 advisory.

    Keegan Ryan discovered that OpenSSL incorrectly handled ECDSA key generation. An attacker could possibly     use this issue to perform a cache-timing attack and recover private ECDSA keys. (CVE-2018-0495)

    Guido Vranken discovered that OpenSSL incorrectly handled very large prime values during a key agreement.
    A remote attacker could possibly use this issue to consume resources, leading to a denial of service.
    (CVE-2018-0732)

    Alejandro Cabrera Aldaya, Billy Brumley, Cesar Pereida Garcia and Luis Manuel Alvarez Tapia discovered     that OpenSSL incorrectly handled RSA key generation. An attacker could possibly use this issue to perform     a cache-timing attack and recover private RSA keys. (CVE-2018-0737)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : OpenSSL vulnerabilities (USN-3692-1)

medium Nessus Plugin ID 110721

Version 1.16