The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5343 advisory.

    Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result     in incomplete encryption, side channel attacks, denial of service or information disclosure. Additional     details can be found in the upstream advisories at https://www.openssl.org/news/secadv/20220705.txt and     https://www.openssl.org/news/secadv/20230207.txt For the stable distribution (bullseye), these problems     have been fixed in version 1.1.1n-0+deb11u4. We recommend that you upgrade your openssl packages. For the     detailed security status of openssl please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/openssl

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5343-1 : openssl - security update

critical Nessus Plugin ID 171218

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.6 Jan 24, 2025, 9:25 PM CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Plugin metadata Plugin Feed: 202501242125
Version 1.5 Sep 5, 2023, 4:12 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202309051612
Version 1.4 Mar 31, 2023, 10:15 AM IAVM reference Plugin Feed: 202303311015
Version 1.3 Feb 22, 2023, 2:14 PM CVSS metrics ("CVSSv3 score" changed from "9.1" to "7.4". "CVSSv3 score" changed from "9.1" to "7.4". "CVSSv3 score" changed from "9.1" to "7.4". "CVSSv3 score" changed from "9.1" to "7.4". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H") Plugin Feed: 202302221414
Version 1.2 Feb 20, 2023, 2:37 PM CVSS metrics ("CVSSv3 score" changed from "5.3" to "9.1". "CVSSv3 score" changed from "5.3" to "9.1". "CVSSv3 score" changed from "5.3" to "9.1". "CVSSv3 score" changed from "5.3" to "9.1". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H") CVSSv3 score source (set to "CVE-2023-0286") CVSSv3 severity (based on CVE-2023-0286, severity increased from "Medium" to "High") Plugin Feed: 202302201437
Version 1.1 Feb 13, 2023, 7:01 PM IAVM reference Plugin Feed: 202302131901
Version 1.0 Feb 9, 2023, 4:31 AM New Plugin Feed: 202302090431