The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3325 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3325-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     February 20, 2023                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : openssl     Version        : 1.1.1n-0+deb10u4     CVE ID         : CVE-2022-2097 CVE-2022-4304 CVE-2022-4450 CVE-2023-0215                      CVE-2023-0286

    Multiple vulnerabilities have been discovered in OpenSSL, a Secure     Sockets Layer toolkit, which may result in incomplete encryption, side     channel attacks, denial of service or information disclosure.

    Additional details can be found in the upstream advisories at     https://www.openssl.org/news/secadv/20220705.txt and     https://www.openssl.org/news/secadv/20230207.txt

    For Debian 10 buster, these problems have been fixed in version     1.1.1n-0+deb10u4.

    We recommend that you upgrade your openssl packages.

    For the detailed security status of openssl please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/openssl

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-3325 : libssl-dev - security update

critical Nessus Plugin ID 171643

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.6 Jan 22, 2025, 5:44 PM CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Plugin metadata Plugin Feed: 202501221744
Version 1.5 Sep 4, 2023, 4:15 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202309041615
Version 1.4 Mar 31, 2023, 10:15 AM IAVM reference Plugin Feed: 202303311015
Version 1.3 Feb 27, 2023, 10:39 PM IAVM reference Plugin Feed: 202302272239
Version 1.2 Feb 22, 2023, 2:14 PM CVSS metrics ("CVSSv3 score" changed from "9.1" to "7.4". "CVSSv3 score" changed from "9.1" to "7.4". "CVSSv3 score" changed from "9.1" to "7.4". "CVSSv3 score" changed from "9.1" to "7.4". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H") Plugin Feed: 202302221414
Version 1.1 Feb 21, 2023, 6:01 AM Regenerated based on advisory update Plugin Feed: 202302210601
Version 1.0 Feb 20, 2023, 6:03 PM New Plugin Feed: 202302201803