Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is not found on the local system.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable     X.509 certificate is not found on the local system. (CVE-2021-34825)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable
    X.509 certificate is not found on the local system. (CVE-2021-34825)

ID	Name	Product	Family	Severity
223890	Linux Distros Unpatched Vulnerability : CVE-2021-34825	Nessus	Misc.	high
406872	Alpine: multiple quassel packages: security update to 0.13.1-r6	Tenable Cloud Security	Alpine Linux Local Security Checks	high
406872	Alpine: multiple quassel packages: security update to 0.13.1-r6	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
400199	Alpine: multiple quassel packages: security update to 0.13.1-r5 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
400199	Alpine: multiple quassel packages: security update to 0.13.1-r5 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
407076	Alpine: multiple quassel packages: security update to 0.13.1-r9 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
407076	Alpine: multiple quassel packages: security update to 0.13.1-r9 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2021-34825

high

Tenable Plugins

high

high

high

high

high

high

high