This update for openssl-1_1 fixes the following issues :

  - CVE-2020-1971: Fixed a NULL pointer dereference in     EDIPARTYNAME (bsc#1179491).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

The version of Oracle Business Intelligence Publisher or Oracle Analytics Server 5.5 running on the remote host is 11.1.1.9.x prior to 11.1.1.9.210215, 12.2.1.3.x prior to 12.2.1.3.210405, 12.2.1.4.x prior to 12.2.1.4.210402, or 12.2.5.5.x (OAS 5.5) prior to 12.2.5.5.210331. It is, therefore, affected by multiple vulnerabilities as noted in the April 2021 Critical Patch Update advisory, including the following:

  - An unspecified vulnerability exists in the Analytics Server component of Oracle BI Enterprise Edition     subcomponent Apache Spark. An unauthenticated, remote attacker can exploit this, via HTTP, to take over     Oracle BI Enterprise Edition. (CVE-2020-9480)

  - A denial of service vulnerability exists in the BI Platform Security component of Oracle BI Enterprise     Edition subcomponent OpenSSL. An unauthenticated, remote attacker can exploit this, via HTTPS, to hang or     repeatedly crash the product. (CVE-2020-1971)

  - An unspecified vulnerability exists in the BI Platform Security component of Oracle BI Enterprise Edition     subcomponent Apache Tomcat.  An unauthenticated, remote attacker can exploit this, via HTTP, to result in     unauthorized update, insert, or delete access to some of Oracle BI accessible data, as well as     unauthorized read access to a subset of Oracle BI accessible data. (CVE-2019-0221)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1456 advisory.

  - The X.509 GeneralName type is a generic type for representing different types of names. One of those name     types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different     instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both     GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a     possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1)     Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in     an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp     authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an     attacker can control both items being compared then that attacker could trigger a crash. For example if     the attacker can trick a client or server into checking a malicious certificate against a malicious CRL     then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a     certificate. This checking happens prior to the signatures on the certificate and CRL being verified.
    OpenSSL's s_server, s_client and verify tools have support for the -crl_download option which implements     automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an     unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of     EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will     accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue.
    Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected     1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w). (CVE-2020-1971)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for openssl-1_0_0 fixes the following issues :

CVE-2020-1971: Fixed a NULL pointer dereference in EDIPARTYNAME (bsc#1179491).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

David Benjamin discovered a flaw in the GENERAL_NAME_cmp() function which could cause a NULL dereference, resulting in denial of service.

For Debian 9 stretch, this problem has been fixed in version 1.0.2u-1~deb9u3.

We recommend that you upgrade your openssl1.0 packages.

For the detailed security status of openssl1.0 please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/openssl1.0

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - openssl: Read buffer overruns processing ASN.1 strings (CVE-2021-3712)

  - Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to     timing attacks via a side-channel timing attack on 'port contention'. (CVE-2018-5407)

  - Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant     code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead     of using a named curve). In those cases it is possible that such a group does not have the cofactor     present. This can occur even where all the parameters match a known named curve. If such a curve is used     then OpenSSL falls back to non-side channel resistant code paths which may result in full key recovery     during an ECDSA signature operation. In order to be vulnerable an attacker would have to have the ability     to time the creation of a large number of signatures where explicit parameters with no co-factor present     are in use by an application using libcrypto. For the avoidance of doubt libssl is not vulnerable because     explicit parameters are never used. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL     1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s). (CVE-2019-1547)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This update for openssl-1_1 fixes the following issues :

CVE-2020-1971: Fixed a NULL pointer dereference in EDIPARTYNAME (bsc#1179491).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This plugin has been deprecated, please use oraclelinux_ELSA-2021-9137.nasl instead.

An update of the mysql package has been released.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4662-1 advisory.

    David Benjamin discovered that OpenSSL incorrectly handled comparing certificates containing a     EDIPartyName name type. A remote attacker could possibly use this issue to cause OpenSSL to crash,     resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5639 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
145351	openSUSE Security Update : openssl-1_1 (openSUSE-2020-2245)	Nessus	SuSE Local Security Checks	1/25/2021	1/26/2024	medium
148980	Oracle Business Intelligence Publisher Multiple Vulnerabilities (Apr 2021 CPU)	Nessus	Misc.	4/26/2021	1/3/2024	critical
143887	Amazon Linux AMI : openssl (ALAS-2020-1456)	Nessus	Amazon Linux Local Security Checks	12/9/2020	12/5/2022	medium
144046	SUSE SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2020:3732-1)	Nessus	SuSE Local Security Checks	12/10/2020	12/5/2022	medium
144262	Debian DLA-2493-1 : openssl1.0 security update	Nessus	Debian Local Security Checks	12/15/2020	12/6/2022	medium
199379	RHEL 8 : openssl (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	10/24/2024	high
143729	SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2020:3721-1)	Nessus	SuSE Local Security Checks	12/9/2020	12/5/2022	medium
148258	Oracle Linux 6 : openssl (ELSA-2021-9150) (deprecated)	Nessus	Oracle Linux Local Security Checks	4/1/2021	4/29/2021	medium
148357	Photon OS 4.0: Mysql PHSA-2021-4.0-0007	Nessus	PhotonOS Local Security Checks	4/7/2021	7/24/2024	critical
143587	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenSSL vulnerability (USN-4662-1)	Nessus	Ubuntu Local Security Checks	12/9/2020	8/27/2024	medium
144505	RHEL 7 : openssl (RHSA-2020:5639)	Nessus	Red Hat Local Security Checks	12/21/2020	11/7/2024	medium

Detections

Analytics

Plugins Search

medium

critical

medium

medium

medium

high

medium

medium

critical

medium

medium