The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3525 advisory.

  - Information exposure through microarchitectural state after transient execution in certain vector     execution units for some Intel(R) Processors may allow an authenticated user to potentially enable     information disclosure via local access. (CVE-2022-40982)

  - A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address     prediction. This may result in speculative execution at an attacker-controlled?address, potentially     leading to information disclosure. (CVE-2023-20569)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DLA-3525-1 : linux-5.10 - LTS security update

medium Nessus Plugin ID 179934

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Mar 27, 2024, 7:16 PM Detection (Debian kernel vulns will now be evaluated against the running kernel version instead of the highest installed version) Plugin Feed: 202403271916
Version 1.2 Sep 26, 2023, 8:16 PM CVSS metrics ("CVSSv2 score" changed from 7.8 to 4.6. "CVSSv3 score" changed from 7.5 to 6.5. "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N" to "CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:N") CVSSv2 score source (changed from "CVE-2023-20569" to "CVE-2022-40982") CVSSv2 severity (based on CVE-2022-40982, severity decreased from "High" to "Medium") CVSSv3 score source (set to "CVE-2022-40982") CVSSv3 severity (based on CVE-2022-40982, severity decreased from "High" to "Medium") Plugin Feed: 202309262016
Version 1.1 Aug 22, 2023, 1:59 PM CVSSv3 score source (set to "CVE-2023-20569") CVSS metrics ("CVSSv2 score" changed from 4.6 to 7.8. "CVSSv3 vector" changed from "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N". "CVSSv3 score" changed from 6.5 to 7.5. "CVSSv2 vector" changed from "CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:N" to "CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N") CVSSv2 score source (changed from "CVE-2022-40982" to "CVE-2023-20569") CVSSv2 severity (based on CVE-2023-20569, severity increased from "Medium" to "High") CVSSv3 severity (based on CVE-2023-20569, severity increased from "Medium" to "High") Plugin Feed: 202308221359
Version 1.0 Aug 18, 2023, 1:59 AM New Plugin Feed: 202308180159