The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5051-1 advisory.

    John Ouyang discovered that OpenSSL incorrectly handled decrypting SM2 data. A remote attacker could use     this issue to cause applications using OpenSSL to crash, resulting in a denial of service, or possibly     change application behaviour. (CVE-2021-3711)

    Ingo Schwarze discovered that OpenSSL incorrectly handled certain ASN.1 strings. A remote attacker could     use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly obtain sensitive     information. (CVE-2021-3712)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 18.04 LTS / 20.04 LTS : OpenSSL vulnerabilities (USN-5051-1)

critical Nessus Plugin ID 152784

Version 1.8