The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3821 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3821-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                   Bastien Roucaris     May 26, 2024                                  https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libreoffice     Version        : 1:6.1.5-3+deb10u12     CVE ID         : CVE-2024-3044

    Unchecked script execution in Graphic on-click binding     in affected LibreOffice versions allows an attacker to create     a document which without prompt will execute scripts built-into     LibreOffice on clicking a graphic. Such scripts were previously     deemed trusted but are now deemed untrusted.

    For Debian 10 buster, this problem has been fixed in version     1:6.1.5-3+deb10u12.

    We recommend that you upgrade your libreoffice packages.

    For the detailed security status of libreoffice please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libreoffice

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-3821 : fonts-opensymbol - security update

medium Nessus Plugin ID 197928

Version 1.4