The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5051-1 advisory.

    John Ouyang discovered that OpenSSL incorrectly handled decrypting SM2 data. A remote attacker could use     this issue to cause applications using OpenSSL to crash, resulting in a denial of service, or possibly     change application behaviour. (CVE-2021-3711)

    Ingo Schwarze discovered that OpenSSL incorrectly handled certain ASN.1 strings. A remote attacker could     use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly obtain sensitive     information. (CVE-2021-3712)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 18.04 LTS / 20.04 LTS : OpenSSL vulnerabilities (USN-5051-1)

critical Nessus Plugin ID 152784

Version 1.8

Version 1.7

Version 1.6

Version 1.8 Aug 28, 2024, 7:43 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408281943
Version 1.7 Oct 16, 2023, 7:25 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") CVSSv3 score source (set to "CVE-2021-3711") Detection Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin metadata Plugin Feed: 202310161925
Version 1.6 Jan 18, 2023, 9:01 AM Logic Changes (Added support for s390x) Plugin Feed: 202301180901