The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5281 advisory.

    It was discovered that parsing errors in the mp4 module of Nginx, a high-performance web and reverse proxy     server, could result in denial of service, memory disclosure or potentially the execution of arbitrary     code when processing a malformed mp4 file. This module is only enabled in the nginx-extras binary package.
    For the stable distribution (bullseye), these problems have been fixed in version 1.18.0-6.1+deb11u3. We     recommend that you upgrade your nginx packages. For the detailed security status of nginx please refer to     its security tracker page at: https://security-tracker.debian.org/tracker/nginx

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5281-1 : nginx - security update

critical Nessus Plugin ID 167747

Version 1.5