The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3942 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3942-2                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Sean Whitton     November 03, 2024                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : openssl     Version        : 1.1.1w-0+deb11u2     CVE ID         : CVE-2023-5678 CVE-2024-0727 CVE-2024-2511 CVE-2024-4741                      CVE-2024-5535 CVE-2024-9143     Debian Bug     : 1055473 1061582 1068658 1072113 1074487 1085378

    The previous update to openssl for Debian bullseye LTS was uploaded     with an incorrect version number.  As a result, the apt tool would not     select the updated package for installation on otherwise up-to-date     bullseye systems.  This has now been corrected.

    For Debian 11 bullseye, this problem has been fixed in version     1.1.1w-0+deb11u2.

    We recommend that you upgrade your openssl packages.

    For the detailed security status of openssl please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/openssl

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-3942 : libcrypto1.1-udeb - security update

high Nessus Plugin ID 209978

Version 1.4

Version 1.3

Version 1.1

Version 1.4 Nov 8, 2024, 5:19 AM CVSS metrics ("Cvssv4 score" set to 8.2) Detection (updated detection logic) Plugin metadata Plugin Feed: 202411080519
Version 1.3 Nov 7, 2024, 11:28 PM CVSS metrics ("Cvssv4 score" set to 8.2) Detection (updated detection logic) Plugin metadata Plugin Feed: 202411072328
Version 1.1 Oct 31, 2024, 10:05 AM New Plugin Feed: 202410311005