The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4065 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4065-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                   Bastien Roucaris     February 23, 2025                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : krb5     Version        : 1.18.3-6+deb11u6     CVE ID         : CVE-2025-24528     Debian Bug     : 1094730

    MIT krb5 a popular implementation of Kerberos 5 protocol was     affected by a vulnerability.

    An authenticated attacker can cause kadmind to write beyond     the end of the mapped region for the iprop log file, likely causing a     process crash.

    For Debian 11 bullseye, this problem has been fixed in version     1.18.3-6+deb11u6.

    We recommend that you upgrade your krb5 packages.

    For the detailed security status of krb5 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/krb5

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-4065 : krb5-admin-server - security update

medium Nessus Plugin ID 216673

Version 1.1