Detections
Analytics
VMware ESXi Multiple OpenSSL Vulnerabilities (VMSA-2014-0004) (Heartbleed)
high Nessus Plugin ID 87676
Language:
Synopsis
The remote VMware ESXi host is missing a security-related patch.Description
The remote VMware ESXi host is affected by multiple vulnerabilities in the OpenSSL third-party library :- A flaw exist in the Elliptic Curve Digital Signature Algorithm (ECDSA) implementation due to a failure to ensure that certain swap operations have a constant-time behavior. An attacker can exploit this to obtain the ECDSA nonces by using a FLUSH+RELOAD cache side-channel attack. (CVE-2014-0076)
- An out-of-bounds read error, known as Heartbleed, exists in the TLS/DTLS implementation due to improper handling of TLS heartbeat extension packets. A remote attacker, using crafted packets, can trigger a buffer over-read, resulting in the disclosure of up to 64KB of process memory, which contains sensitive information such as primary key material, secondary key material, and other protected content. (CVE-2014-0160)
Solution
Apply the appropriate patch according to the vendor advisory that pertains to ESXi version 5.5 / 5.5 U1. Additional remediation steps may also need to be performed after applying the patch.See Also
https://www.vmware.com/security/advisories/VMSA-2014-0004
http://lists.vmware.com/pipermail/security-announce/2014/000244.html
Plugin Details
Severity: High
ID: 87676
File Name: vmware_VMSA-2014-0004_remote.nasl
Version: 1.10
Type: remote
Family: Misc.
Published: 12/30/2015
Updated: 4/25/2023
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.1
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 4.1
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS Score Source: CVE-2014-0160
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:vmware:esxi:5.5
Required KB Items: Host/VMware/version, Host/VMware/release
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 4/23/2014
Vulnerability Publication Date: 2/24/2014
CISA Known Exploited Vulnerability Due Dates: 5/25/2022
Exploitable With
Core Impact
Reference Information
CVE: CVE-2014-0076, CVE-2014-0160