The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-5923 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5923-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     May 18, 2025                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : net-tools     CVE ID         : CVE-2025-46836     Debian Bug     : 1105806

    Mohamed Maatallah discovered a stack-based buffer overflow in the     get_name() function in net-tools, a collection of programs for     controlling the network subsystem of the Linux kernel, which may result     in denial of service (application crash) or potentially the execution of     arbitrary code.

    For the stable distribution (bookworm), this problem has been fixed in     version 2.10-0.1+deb12u1.

    We recommend that you upgrade your net-tools packages.

    For the detailed security status of net-tools please refer to its     security tracker page at:
    https://security-tracker.debian.org/tracker/net-tools

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dsa-5923 : net-tools - security update

medium Nessus Plugin ID 236929

Version 1.1