The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3351 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3351-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Lee Garrett     March 03, 2023                                https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : apache2     Version        : 2.4.38-3+deb10u9     CVE ID         : CVE-2006-20001 CVE-2021-33193 CVE-2022-36760                      CVE-2022-37436

    Multiple security vulnerabilities have been discovered in Apache HTTP     server.

    CVE-2006-20001

    A carefully crafted If: request header can cause a memory read, or write     of a single zero byte, in a pool (heap) memory location beyond the header     value sent. This could cause the process to crash.

    CVE-2021-33193

    A crafted method sent through HTTP/2 will bypass validation and be     forwarded by mod_proxy, which can lead to request splitting or cache     poisoning.

    CVE-2022-36760

    Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')     vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to     smuggle requests to the AJP server it forwards requests to.

    CVE-2022-37436

    A malicious backend can cause the response headers to be truncated early,     resulting in some headers being incorporated into the response body. If     the later headers have any security purpose, they will not be interpreted     by the client.

    For Debian 10 buster, these problems have been fixed in version     2.4.38-3+deb10u9.

    We recommend that you upgrade your apache2 packages.

    For the detailed security status of apache2 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/apache2

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-3351 : apache2 - security update

critical Nessus Plugin ID 172449

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Jan 22, 2025, 5:44 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202501221744
Version 1.2 Aug 30, 2023, 4:14 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202308301614
Version 1.1 Mar 13, 2023, 6:45 PM IAVM reference Plugin Feed: 202303131845
Version 1.0 Mar 10, 2023, 11:54 PM New Plugin Feed: 202303102354