The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3736 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3736-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Markus Koschany     February 21, 2024                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : unbound     Version        : 1.9.0-2+deb10u4     CVE ID         : CVE-2023-50387 CVE-2023-50868     Debian Bug     : 1063845

    Two vulnerabilities were discovered in unbound, a validating, recursive,     caching DNS resolver. Specially crafted DNSSEC answers could lead unbound     down a very CPU intensive and time costly DNSSEC (CVE-2023-50387) or NSEC3     hash (CVE-2023-50868) validation path, resulting in denial of service.

    For Debian 10 buster, these problems have been fixed in version     1.9.0-2+deb10u4.

    We recommend that you upgrade your unbound packages.

    For the detailed security status of unbound please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/unbound

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: This is a digitally signed message part

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-3736 : libunbound-dev - security update

high Nessus Plugin ID 190852

Version 1.1

Version 1.0

Version 1.1 Jan 22, 2025, 5:44 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202501221744
Version 1.0 Feb 21, 2024, 7:25 PM New Plugin Feed: 202402211925