The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5723 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5723-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     June 27, 2024                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : plasma-workspace     CVE ID         : CVE-2024-36041

    Fabian Vogt discovered that the KDE session management server     insufficiently restricted ICE connections from localhost, which could     allow a local attacker to execute arbitrary code as another user on     next boot.

    For the oldstable distribution (bullseye), this problem has been fixed     in version 4:5.20.5-6+deb11u1.

    For the stable distribution (bookworm), this problem has been fixed in     version 4:5.27.5-2+deb12u2.

    We recommend that you upgrade your plasma-workspace packages.

    For the detailed security status of plasma-workspace please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/plasma-workspace

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dsa-5723 : libcolorcorrect5 - security update

high Nessus Plugin ID 201116

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Jul 9, 2024, 8:36 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202407090836
Version 1.3 Jul 3, 2024, 2:36 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202407030236
Version 1.2 Jul 2, 2024, 12:53 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202407021253
Version 1.1 Jun 28, 2024, 12:35 AM New Plugin Feed: 202406280035