The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3203 advisory.

  - ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing     different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A     MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one     subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-     protocol attacks may be possible where the behavior of one protocol service may compromise the other at     the application layer. (CVE-2021-3618)

  - NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1     and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module     ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its     termination or potential other impact using a specially crafted audio or video file. The issue affects     only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the     configuration file. Further, the attack is possible only if an attacker can trigger processing of a     specially crafted audio or video file with the module ngx_http_mp4_module. (CVE-2022-41741)

  - NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1     and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module     ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in     worker process memory disclosure by using a specially crafted audio or video file. The issue affects only     NGINX products that are built with the module ngx_http_mp4_module, when the mp4 directive is used in the     configuration file. Further, the attack is possible only if an attacker can trigger processing of a     specially crafted audio or video file with the module ngx_http_mp4_module. (CVE-2022-41742)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DLA-3203-1 : nginx - LTS security update

high Nessus Plugin ID 168171

Version 1.3

Version 1.2

Version 1.3 Nov 2, 2023, 2:21 PM IAVM reference Plugin Feed: 202311021421
Version 1.2 Nov 24, 2022, 7:45 PM New Plugin Feed: 202211241945