The version of OpenSSL installed on the remote host is prior to 1.0.2a. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2a advisory.

  - An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2     implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before     1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for     remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a     related issue to CVE-2016-0800. (CVE-2016-0704)

  - The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf,     1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY     CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the     MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a     related issue to CVE-2016-0800. (CVE-2016-0703)

  - The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client     authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a     denial of service (daemon crash) via a ClientKeyExchange message with a length of zero. (CVE-2015-1787)

  - The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2     before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon     exit) via a crafted CLIENT-MASTER-KEY message. (CVE-2015-0293)

  - The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a     denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms     extension in the ClientHello message during a renegotiation. (CVE-2015-0291)

  - The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on     64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which     allows remote attackers to cause a denial of service (pointer corruption and application crash) via     unspecified vectors. (CVE-2015-0290)

  - The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2     before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a     denial of service (NULL pointer dereference and application crash) by leveraging an application that     processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to     crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c. (CVE-2015-0289)

  - The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r,     1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which     might allow attackers to cause a denial of service (invalid write operation and memory corruption) by     leveraging an application that relies on ASN.1 structure reuse. (CVE-2015-0287)

  - The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1     before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows     remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted     X.509 certificate to an endpoint that uses the certificate-verification feature. (CVE-2015-0286)

  - Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before     0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to     cause a denial of service (memory corruption and application crash) or possibly have unspecified other     impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.
    (CVE-2015-0209)

  - The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c     in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer     dereference and application crash) via crafted RSA PSS parameters to an endpoint that uses the     certificate-verification feature. (CVE-2015-0208)

  - The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state     information of independent data streams, which allows remote attackers to cause a denial of service     (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server.
    (CVE-2015-0207)

  - The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG     is seeded before proceeding with a handshake, which makes it easier for remote attackers to defeat     cryptographic protection mechanisms by sniffing the network and then conducting a brute-force attack.
    (CVE-2015-0285)

  - The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r,     1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL     pointer dereference and application crash) via an invalid certificate key. (CVE-2015-0288)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

OpenSSL 1.0.2 < 1.0.2a Multiple Vulnerabilities

medium Nessus Plugin ID 82033