The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3718 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3718-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     January 25, 2024                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : php-phpseclib     Version        : 2.0.30-2~deb10u2     CVE ID         : CVE-2023-48795

    It was discovered that php-phpseclib, a PHP library for     arbitrary-precision integer arithmetic, was vulnerable to the so-called     Terrapin Attack.

    The SSH transport protocol with certain OpenSSH extensions, allows     remote attackers to bypass integrity checks such that some packets are     omitted (from the extension negotiation message), and a client and     server may consequently end up with a connection for which some security     features have been downgraded or disabled, aka a Terrapin attack.  This     occurs because the SSH Binary Packet Protocol (BPP), implemented by     these extensions, mishandles the handshake phase and mishandles use of     sequence numbers.  For example, there is an effective attack against     SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC).

    For Debian 10 buster, this problem has been fixed in version     2.0.30-2~deb10u2.

    We recommend that you upgrade your php-phpseclib packages.

    For the detailed security status of php-phpseclib please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/php-phpseclib

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-3718 : php-phpseclib - security update

critical Nessus Plugin ID 189489

Version 1.1

Version 1.0

Version 1.1 Jan 22, 2025, 5:44 PM CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") Plugin metadata Plugin Feed: 202501221744
Version 1.0 Jan 25, 2024, 9:16 AM New Plugin Feed: 202401250916