The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3549 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3549-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                    Thorsten Alteholz     August 29, 2023                               https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : ring     Version        : 20190215.1.f152c98~ds1-1+deb10u2     CVE ID         : CVE-2021-37706 CVE-2021-43299 CVE-2021-43300                      CVE-2021-43301 CVE-2021-43302 CVE-2021-43303                      CVE-2021-43804 CVE-2021-43845 CVE-2022-21722                      CVE-2022-21723 CVE-2022-23537 CVE-2022-23547                      CVE-2022-23608 CVE-2022-24754 CVE-2022-24763                      CVE-2022-24764 CVE-2022-24793 CVE-2022-31031                      CVE-2022-39244 CVE-2023-27585


    Several issue have been found in ring/jami, a secure and distributed     voice, video and chat platform.
    The issues are about missing boundary checks, resulting in out-of-bound     read access, buffer overflow or denial-of-service.



    For Debian 10 buster, these problems have been fixed in version     20190215.1.f152c98~ds1-1+deb10u2.

    We recommend that you upgrade your ring/jami packages.

    For the detailed security status of ring please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/ring

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-3549 : jami - security update

critical Nessus Plugin ID 180270

Version 1.1

Version 1.0

Version 1.1 Jan 22, 2025, 3:03 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202501221503
Version 1.0 Aug 30, 2023, 2:01 PM New Plugin Feed: 202308301401