The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5710 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5710-1                   security@debian.org     https://www.debian.org/security/                           Andres Salomon     June 14, 2024                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : chromium     CVE ID         : CVE-2024-5830 CVE-2024-5831 CVE-2024-5832 CVE-2024-5833                      CVE-2024-5834 CVE-2024-5835 CVE-2024-5836 CVE-2024-5837                      CVE-2024-5838 CVE-2024-5839 CVE-2024-5840 CVE-2024-5841                      CVE-2024-5842 CVE-2024-5843 CVE-2024-5844 CVE-2024-5845                      CVE-2024-5846 CVE-2024-5847

    Security issues were discovered in Chromium, which could result     in the execution of arbitrary code, denial of service or information     disclosure.

    For the stable distribution (bookworm), these problems have been fixed in     version 126.0.6478.56-1~deb12u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dsa-5710 : chromium - security update

high Nessus Plugin ID 200624

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Aug 16, 2024, 7:34 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202408160734
Version 1.2 Jun 21, 2024, 2:16 PM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2024-5847, severity increased from "Medium" to "High") Plugin Feed: 202406211416
Version 1.1 Jun 15, 2024, 1:20 AM New Plugin Feed: 202406150120