The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5833 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5833-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     December 17, 2024                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : dpdk     CVE ID         : CVE-2024-11614

    A buffer overflow was discovered in the vhost code of DPDK, a set of     libraries for fast packet processing, which could result in denial of     service or the execution of arbitrary code by malicious     guests/containers.

    For the stable distribution (bookworm), this problem has been fixed in     version 22.11.7-1~deb12u1.

    We recommend that you upgrade your dpdk packages.

    For the detailed security status of dpdk please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/dpdk

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dsa-5833 : dpdk - security update

high Nessus Plugin ID 213102

Version 1.2

Version 1.1

Version 1.2 Dec 19, 2024, 9:35 AM CVSS metrics ("CVSSv3 score" set to 7.4) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H") Plugin Feed: 202412190935
Version 1.1 Dec 18, 2024, 7:05 AM New Plugin Feed: 202412180705