The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5513 advisory.

    Multiple security issues were discovered in Thunderbird, which could result in denial of service or the     execution of arbitrary code. Debian follows the Thunderbird upstream releases. Support for the 102.x     series has ended, so starting with this update we're now following the 115.x series. For the oldstable     distribution (bullseye), this problem has been fixed in version 1:115.3.1-1~deb11u1. For the stable     distribution (bookworm), this problem has been fixed in version 1:115.3.1-1~deb12u1. We recommend that you     upgrade your thunderbird packages. For the detailed security status of thunderbird please refer to its     security tracker page at: https://security-tracker.debian.org/tracker/thunderbird

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5513-1 : thunderbird - security update

critical Nessus Plugin ID 182474

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Jan 24, 2025, 9:25 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202501242125
Version 1.1 Oct 6, 2023, 10:25 AM IAVM reference Plugin Feed: 202310061025
Version 1.0 Oct 4, 2023, 4:00 AM New Plugin Feed: 202310040400