The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1054 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL),     Transport Layer Security (TLS), and Datagram Transport Layer Security     (DTLS) protocols, as well as a full-strength, general purpose cryptography     library.

    A race condition was found in the way OpenSSL handled ServerHello messages     with an included Supported EC Point Format extension. A malicious server     could possibly use this flaw to cause a multi-threaded TLS/SSL client using     OpenSSL to write into freed memory, causing the client to crash or execute     arbitrary code. (CVE-2014-3509)

    It was discovered that the OBJ_obj2txt() function could fail to properly     NUL-terminate its output. This could possibly cause an application using     OpenSSL functions to format fields of X.509 certificates to disclose     portions of its memory. (CVE-2014-3508)

    A flaw was found in the way OpenSSL handled fragmented handshake packets.
    A man-in-the-middle attacker could use this flaw to force a TLS/SSL server     using OpenSSL to use TLS 1.0, even if both the client and the server     supported newer protocol versions. (CVE-2014-3511)

    Multiple flaws were discovered in the way OpenSSL handled DTLS packets.
    A remote attacker could use these flaws to cause a DTLS server or client     using OpenSSL to crash or use excessive amounts of memory. (CVE-2014-3505,     CVE-2014-3506, CVE-2014-3507)

    A NULL pointer dereference flaw was found in the way OpenSSL performed a     handshake when using the anonymous Diffie-Hellman (DH) key exchange. A     malicious server could cause a DTLS client using OpenSSL to crash if that     client had anonymous DH cipher suites enabled. (CVE-2014-3510)

    All OpenSSL users are advised to upgrade to these updated packages, which     contain backported patches to correct these issues. For the update to take     effect, all services linked to the OpenSSL library must be restarted or the     system rebooted.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : openssl (RHSA-2014:1054)

high Nessus Plugin ID 79040

Version 1.17

Version 1.16

Version 1.17 Jun 3, 2024, 4:41 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202406031641
Version 1.16 Apr 25, 2024, 2:46 AM CVSS metrics ("CVSSv3 score" set to 7.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv2 score source (set to "CVE-2014-3509") CVSSv3 score source (set to "CVE-2014-3507") Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404250246