The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5453 advisory.

  - A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol.
    This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion     failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the     system. (CVE-2023-2156)

  - Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()`     failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace     (CVE-2023-31248)

  - Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register     contents when CAP_NET_ADMIN is in any user or network namespace (CVE-2023-35001)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5453-1 : linux - security update

high Nessus Plugin ID 178329

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.5 Mar 27, 2024, 7:16 PM Detection (Debian kernel vulns will now be evaluated against the running kernel version instead of the highest installed version) Plugin Feed: 202403271916
Version 1.4 Dec 25, 2023, 2:08 PM CVSS metrics ("CVSSv2 score" set to 6.8. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSSv2 score source (changed from "CVE-2023-2156" to "CVE-2023-35001") CVSSv2 severity (based on CVE-2023-35001, severity decreased from "High" to "Medium") CVSSv3 score source (changed from "CVE-2023-31248" to none) Plugin Feed: 202312251408
Version 1.3 Dec 13, 2023, 4:19 PM CVSS metrics ("CVSSv3 score" set to 7.8. "CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2023-31248") Plugin Feed: 202312131619
Version 1.2 Sep 15, 2023, 4:16 PM CVSS metrics ("CVSSv3 score" changed from 7.8 to 7.5. "CVSSv3 vector" changed from "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H") CVSSv3 score source (set to "CVE-2023-2156") Plugin Feed: 202309151616
Version 1.1 Sep 14, 2023, 4:20 PM CVSS metrics ("CVSSv2 score" changed from 6.8 to 7.8. "CVSSv2 vector" changed from "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C" to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C") CVSSv2 score source (changed from "CVE-2023-35001" to "CVE-2023-2156") CVSSv2 severity (based on CVE-2023-2156, severity increased from "Medium" to "High") Plugin Feed: 202309141620
Version 1.0 Jul 17, 2023, 7:43 PM New Plugin Feed: 202307171943