Amazon Linux 2 : edk2 (ALAS-2024-2591)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2591 advisory. Issue summary: Calling the OpenSSL API function SSLselectnextproto with anempty supported client protocols buffer may cause a crash or memory contents tobe sent to the peer. Impact summary: A buffer...

Photon OS 4.0: Openssl PHSA-2023-4.0-0308

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0308. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Siemens SIMATIC and SCALANCE Products Inadequate Encryption Strength (CVE-2023-0464)

A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of...

Photon OS 5.0: Openssl PHSA-2023-5.0-0096

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0096. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Openssl PHSA-2022-4.0-0143

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0143. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Openssl PHSA-2023-4.0-0406

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0406. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Openssl PHSA-2022-4.0-0272

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0272. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Openssl PHSA-2023-4.0-0330

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0330. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Siemens SIMATIC and SCALANCE Products Inadequate Encryption Strength (CVE-2023-0465)

Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that...

Siemens SIMATIC and SCALANCE Products Inadequate Encryption Strength (CVE-2023-0466)

The function X509VERIFYPARAMadd0policy is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate...

Photon OS 4.0: Openssl PHSA-2022-4.0-0267

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0267. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Openssl PHSA-2022-4.0-0207

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0207. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Openssl PHSA-2022-4.0-0162

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0162. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Openssl PHSA-2023-4.0-0434

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0434. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Openssl PHSA-2022-4.0-0165

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0165. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Openssl PHSA-2022-4.0-0202

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0202. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openssl PHSA-2023-5.0-0148

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0148. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Openssl PHSA-2024-4.0-0647

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0647. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openssl PHSA-2024-5.0-0313

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0313. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Openssl PHSA-2024-4.0-0637

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0637. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...