The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6224 advisory.

  - openssl: c_rehash script allows command injection (CVE-2022-1292)

  - openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS     (CVE-2022-1343)

  - openssl: OPENSSL_LH_flush() breaks reuse of memory (CVE-2022-1473)

  - openssl: the c_rehash script allows command injection (CVE-2022-2068)

  - openssl: AES OCB fails to encrypt some bytes (CVE-2022-2097)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : openssl (RHSA-2022:6224)

critical Nessus Plugin ID 164507

Version 1.11