The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12213 advisory.

    - Fixed Timing Oracle in RSA Decryption       Resolves: CVE-2022-4304
    - Fixed Double free after calling PEM_read_bio_ex       Resolves: CVE-2022-4450
    - Fixed Use-after-free following BIO_new_NDEF       Resolves: CVE-2023-0215
    - Fixed X.400 address type confusion in X.509 GeneralName       Resolves: CVE-2023-0286

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 8 : openssl (ELSA-2023-12213)

critical Nessus Plugin ID 173617

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.6 Nov 2, 2024, 2:28 AM CVSS metrics ("Cvssv4 score" set to 9.3) Detection (updated detection logic) Plugin Feed: 202411020228
Version 1.5 Oct 23, 2024, 10:51 PM CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 supplemental" set to none) Detection (updated detection logic) Plugin Feed: 202410232251
Version 1.4 Oct 23, 2024, 7:37 AM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") Plugin Feed: 202410230737
Version 1.3 Oct 23, 2024, 12:00 AM CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 supplemental" set to "CVSS:4.0/U:Red") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") Plugin metadata Plugin Feed: 202410230000
Version 1.2 Sep 16, 2023, 2:14 AM Detection Plugin Feed: 202309160214
Version 1.1 Mar 31, 2023, 10:15 AM IAVM reference Plugin Feed: 202303311015
Version 1.0 Mar 29, 2023, 4:01 AM New Plugin Feed: 202303290401