Detections
Analytics
OpenSSL 1.1.0 < 1.1.0c Multiple Vulnerabilities
high Nessus Network Monitor Plugin ID 9800
Synopsis
The remote web server is running an outdated instance of OpenSSL and is affected by multiple attack vectors.Description
According to its banner, the version of OpenSSL on the remote host is version 1.1.0 prior to 1.1.0c and is affected by multiple vulnerabilities :- A NULL pointer dereference flaw exists in the 'asn1_item_embed_d2i()' function in 'crypto/asn1/tasn_dec.c' that is triggered when handling the ASN.1 CHOICE type. This may allow a remote attacker to crash a process linked against the library. (CVE-2016-7053)
- An overflow condition exists in the 'chacha20_poly1305_cipher()' function in 'crypto/evp/e_chacha20_poly1305.c' that is triggered when handling TLS connections using *-CHACHA20-POLY1305 ciphersuites. This may allow a remote attacker to cause a heap-based buffer overflow and crash a process linked against the library. (CVE-2016-7054)
- A carry propagating flaw exists in the Broadwell-specific Montgomery multiplication procedure that leads to incorrect results. This may result in transient authentication and key negotiation failures, reproducible erroneous outcomes of public-key operations, or potentially attacks against ECDH key negotiation in very atypical cases. (CVE-2016-7055)
Solution
Upgrade OpenSSL to version 1.1.0c or higherSee Also
Plugin Details
Severity: High
ID: 9800
Family: Web Servers
Published: 11/18/2016
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 7.2
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:X/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:openssl:openssl
Patch Publication Date: 11/10/2016
Vulnerability Publication Date: 11/10/2016