The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2884-1 advisory.

    Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data     integrity, and availability. An attacker could exploit these to cause a denial of service, expose     sensitive data over the network, or possibly execute arbitrary code. (CVE-2016-0483, CVE-2016-0494)

    A vulnerability was discovered in the OpenJDK JRE related to data integrity. An attacker could exploit     this to expose sensitive data over the network or possibly execute arbitrary code. (CVE-2016-0402)

    It was discovered that OpenJDK 7 incorrectly allowed MD5 to be used for TLS connections. If a remote     attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to expose     sensitive information. (CVE-2015-7575)

    A vulnerability was discovered in the OpenJDK JRE related to information disclosure. An attacker could     exploit this to expose sensitive data over the network. (CVE-2016-0448)

    A vulnerability was discovered in the OpenJDK JRE related to availability. An attacker could exploit this     to cause a denial of service. (CVE-2016-0466)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

java-1_7_0-openjdk was updated to version 7u95 to fix 9 security issues. (bsc#962743)

  - CVE-2015-4871: Rebinding of the receiver of a     DirectMethodHandle may allow a protected method to be     accessed

  - CVE-2015-7575: Further reduce use of MD5 (SLOTH)     (bsc#960996)

  - CVE-2015-8126: Vulnerability in the AWT component     related to splashscreen displays

  - CVE-2015-8472: Vulnerability in the AWT component,     addressed by same fix

  - CVE-2016-0402: Vulnerability in the Networking component     related to URL processing

  - CVE-2016-0448: Vulnerability in the JMX comonent related     to attribute processing

  - CVE-2016-0466: Vulnerability in the JAXP component,     related to limits

  - CVE-2016-0483: Vulnerability in the AWT component     related to image decoding

  - CVE-2016-0494: Vulnerability in 2D component related to     font actions

The following bugs were fixed :

  - bsc#939523: java-1_7_0-openjdk-headless had X     dependencies, move libjavagtk to full package

This update was imported from the SUSE:SLE-12:Update update project.

This update for java-1_8_0-ibm fixes the following security issues by updating to 8.0-2.10 (bsc#963937) :

  - CVE-2015-5041: Could could have invoked non-public     interface methods under certain circumstances

  - CVE-2015-7575: The TLS protocol could allow weaker than     expected security caused by a collision attack when     using the MD5 hash function for signing a     ServerKeyExchange message during a TLS handshake. An     attacker could exploit this vulnerability using     man-in-the-middle techniques to impersonate a TLS server     and obtain credentials

  - CVE-2015-8126: buffer overflow in libpng caused by     improper bounds checking by the png_set_PLTE() and     png_get_PLTE() functions

  - CVE-2015-8472: buffer overflow in libpng caused by     improper bounds checking by the png_set_PLTE() and     png_get_PLTE() functions

  - CVE-2016-0402: An unspecified vulnerability related to     the Networking component has no confidentiality impact,     partial integrity impact, and no availability impact

  - CVE-2016-0448: An unspecified vulnerability related to     the JMX component could allow a remote attacker to     obtain sensitive information

  - CVE-2016-0466: An unspecified vulnerability related to     the JAXP component could allow a remote attacker to     cause a denial of service

  - CVE-2016-0475: An unspecified vulnerability related to     the Libraries component has partial confidentiality     impact, partial integrity impact, and no availability     impact

  - CVE-2016-0483: An unspecified vulnerability related to     the AWT component has complete confidentiality impact,     complete integrity impact, and complete availability     impact

  - CVE-2016-0494: An unspecified vulnerability related to     the 2D component has complete confidentiality impact,     complete integrity impact, and complete availability     impact

The following bugs were fixed :

  - bsc#960402: resolve package conflicts in devel package

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7575 The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials. IBM AIX does not require the newest version of TLS by default which could allow a remote attacker to obtain sensitive information using man in the middle techniques.

This update to 38.6.0 fixes the following issues :

  - MFSA 2016-01/CVE-2016-1930 Miscellaneous memory safety     hazards

  - MFSA 2016-03/CVE-2016-1935 (bmo#1220450) Buffer overflow     in WebGL after out of memory allocation

The remote host is affected by the vulnerability described in GLSA-201706-18 (mbed TLS: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in mbed TLS. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0098 advisory.

    IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM     Java Software Development Kit.

    This update fixes several vulnerabilities in the IBM Java Runtime     Environment and the IBM Java Software Development Kit. Further information     about these flaws can be found on the IBM Java Security alerts page, listed     in the References section. (CVE-2015-5041, CVE-2015-7575, CVE-2015-8126,     CVE-2015-8472, CVE-2016-0402, CVE-2016-0448, CVE-2016-0466, CVE-2016-0475,     CVE-2016-0483, CVE-2016-0494)

    Note: This update also disallows the use of the MD5 hash algorithm in the     certification path processing. The use of MD5 can be re-enabled by removing     MD5 from the jdk.certpath.disabledAlgorithms security property defined in     the java.security file.

    All users of java-1.8.0-ibm are advised to upgrade to these updated     packages, containing the IBM Java SE 8 SR2-FP10 release. All running     instances of IBM Java must be restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201605-06 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Firefox, NSS, NSPR, and       Thunderbird. Please review the CVE identifiers referenced below for       details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Furthermore, a remote attacker may be able       to perform Man-in-the-Middle attacks, obtain sensitive information, spoof       the address bar, conduct clickjacking attacks, bypass security       restrictions and protection mechanisms, or have other unspecified       impacts.
  Workaround :

    There is no known workaround at this time.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - fix CVE-2015-7575 - disallow use of MD5 in TLS1.2

  - fix CVE-2015-3194 - certificate verify crash with     missing PSS parameter

  - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak

  - fix CVE-2015-3196 - race condition when handling PSK     identity hint

The remote OracleVM system is missing necessary patches to address critical security updates :

  - fix CVE-2016-2105 - possible overflow in base64 encoding

  - fix CVE-2016-2106 - possible overflow in     EVP_EncryptUpdate

  - fix CVE-2016-2107 - padding oracle in stitched AES-NI     CBC-MAC

  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder

  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data     from BIO

  - fix CVE-2016-0799 - memory issues in BIO_printf

  - fix CVE-2016-0702 - side channel attack on modular     exponentiation

  - fix CVE-2016-0705 - double-free in DSA private key     parsing

  - fix CVE-2016-0797 - heap corruption in BN_hex2bn and     BN_dec2bn

  - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement

  - disable SSLv2 in the generic TLS method

  - fix 1-byte memory leak in pkcs12 parse (#1229871)

  - document some options of the speed command (#1197095)

  - fix high-precision timestamps in timestamping authority

  - fix CVE-2015-7575 - disallow use of MD5 in TLS1.2

  - fix CVE-2015-3194 - certificate verify crash with     missing PSS parameter

  - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak

  - fix CVE-2015-3196 - race condition when handling PSK     identity hint

Several vulnerabilities were discovered in NSS, the cryptography library developed by the Mozilla project.

  - CVE-2015-4000     David Adrian et al. reported that it may be feasible to     attack Diffie-Hellman-based cipher suites in certain     circumstances, compromising the confidentiality and     integrity of data encrypted with Transport Layer     Security (TLS).

  - CVE-2015-7181 CVE-2015-7182 CVE-2016-1950     Tyson Smith, David Keeler, and Francis Gabriel     discovered heap-based buffer overflows in the ASN.1 DER     parser, potentially leading to arbitrary code execution.

  - CVE-2015-7575     Karthikeyan Bhargavan discovered that TLS client     implementation accepted MD5-based signatures for TLS 1.2     connections with forward secrecy, weakening the intended     security strength of TLS connections.

  - CVE-2016-1938     Hanno Boeck discovered that NSS miscomputed the result     of integer division for certain inputs. This could     weaken the cryptographic protections provided by NSS.
    However, NSS implements RSA-CRT leak hardening, so RSA     private keys are not directly disclosed by this issue.

  - CVE-2016-1978     Eric Rescorla discovered a use-after-free vulnerability     in the implementation of ECDH-based TLS handshakes, with     unknown consequences.

  - CVE-2016-1979     Tim Taubert discovered a use-after-free vulnerability in     ASN.1 DER processing, with application-specific impact.

  - CVE-2016-2834     Tyson Smith and Jed Davis discovered unspecified     memory-safety bugs in NSS.

In addition, the NSS library did not ignore environment variables in processes which underwent a SUID/SGID/AT_SECURE transition at process start. In certain system configurations, this allowed local users to escalate their privileges.

This update contains further correctness and stability fixes without immediate security impact.

ID	Name	Product	Family	Published	Updated	Severity
88516	Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-2884-1)	Nessus	Ubuntu Local Security Checks	2/2/2016	2/18/2025	high
88541	openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2016-115) (SLOTH)	Nessus	SuSE Local Security Checks	2/3/2016	1/19/2021	high
88692	SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2016:0390-1) (SLOTH)	Nessus	SuSE Local Security Checks	2/11/2016	1/6/2021	critical
94170	AIX 6.1 TL 9 : nettcp (IV78625) (SLOTH)	Nessus	AIX Local Security Checks	10/21/2016	4/21/2023	medium
94174	AIX 7.1 TL 3 : nettcp (IV82327) (SLOTH)	Nessus	AIX Local Security Checks	10/21/2016	4/21/2023	medium
92560	AIX 6.1 TL 9 : nettcp (IV86116) (SLOTH)	Nessus	AIX Local Security Checks	7/27/2016	4/21/2023	medium
92565	AIX 7.2 TL 0 : nettcp (IV86132) (SLOTH)	Nessus	AIX Local Security Checks	7/27/2016	4/21/2023	medium
88830	openSUSE Security Update : Thunderbird (openSUSE-2016-225) (SLOTH)	Nessus	SuSE Local Security Checks	2/18/2016	1/19/2021	critical
100944	GLSA-201706-18 : mbed TLS: Multiple vulnerabilities (SLOTH)	Nessus	Gentoo Local Security Checks	6/21/2017	1/11/2021	high
88554	RHEL 7 : java-1.8.0-ibm (RHSA-2016:0098)	Nessus	Red Hat Local Security Checks	2/3/2016	3/24/2025	critical
91379	GLSA-201605-06 : Mozilla Products: Multiple vulnerabilities (Logjam) (SLOTH)	Nessus	Gentoo Local Security Checks	5/31/2016	12/5/2022	critical
87800	OracleVM 3.3 : openssl (OVMSA-2016-0001) (SLOTH)	Nessus	OracleVM Local Security Checks	1/8/2016	1/4/2021	high
91154	OracleVM 3.3 / 3.4 : openssl (OVMSA-2016-0049) (SLOTH)	Nessus	OracleVM Local Security Checks	5/16/2016	1/4/2021	critical
93871	Debian DSA-3688-1 : nss - security update (Logjam) (SLOTH)	Nessus	Debian Local Security Checks	10/6/2016	12/5/2022	critical

Detections

Analytics

Plugins Search

high

high

critical

medium

medium

medium

medium

critical

high

critical

critical

high

critical

critical