The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3530 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3530-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Anton Gladky     August 15, 2023                               https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : openssl     Version        : 1.1.1n-0+deb10u6     CVE ID         : CVE-2023-3446 CVE-2023-3817

    Two vunerabilities were discovered in openssl, a Secure Sockets Layer toolkit:

    CVE-2023-3446, CVE-2023-3817

        Excessively long DH key or parameter checks can cause significant delays         in applications using DH_check(), DH_check_ex(), or EVP_PKEY_param_check()         functions, potentially leading to Denial of Service attacks when keys or         parameters are obtained from untrusted sources.


    For Debian 10 buster, these problems have been fixed in version     1.1.1n-0+deb10u6.

    We recommend that you upgrade your openssl packages.

    For the detailed security status of openssl please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/openssl

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-3530 : libssl-dev - security update

critical Nessus Plugin ID 179900

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Jan 22, 2025, 5:44 PM CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") Plugin metadata Plugin Feed: 202501221744
Version 1.1 Sep 15, 2023, 10:10 AM IAVM reference Plugin Feed: 202309151010
Version 1.0 Aug 16, 2023, 4:04 PM New Plugin Feed: 202308161604