The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3384 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3384-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Markus Koschany     April 05, 2023                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : tomcat9     Version        : 9.0.31-1~deb10u8     CVE ID         : CVE-2022-42252 CVE-2023-28708     Debian Bug     : 1033475

    Two security vulnerabilities have been discovered in the Tomcat     servlet and JSP engine.

    CVE-2022-42252

        Apache Tomcat was configured to ignore invalid HTTP headers via setting         rejectIllegalHeader to false. Tomcat did not reject a request containing an         invalid Content-Length header making a request smuggling attack possible if         Tomcat was located behind a reverse proxy that also failed to reject the         request with the invalid header.

    CVE-2023-28708

        When using the RemoteIpFilter with requests received from a reverse proxy         via HTTP that include the X-Forwarded-Proto header set to https, session         cookies created by Apache Tomcat did not include the secure attribute. This         could result in the user agent transmitting the session cookie over an         insecure channel.

    For Debian 10 buster, these problems have been fixed in version     9.0.31-1~deb10u8.

    We recommend that you upgrade your tomcat9 packages.

    For the detailed security status of tomcat9 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/tomcat9

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: This is a digitally signed message part

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-3384 : libtomcat9-embed-java - security update

high Nessus Plugin ID 174045

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Jan 22, 2025, 8:38 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202501222038
Version 1.1 May 25, 2023, 5:09 PM IAVM reference Plugin Feed: 202305251709
Version 1.0 Apr 11, 2023, 2:04 AM New Plugin Feed: 202304110204