The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5953 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5953-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     June 29, 2025                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : catdoc     CVE ID         : CVE-2024-48877 CVE-2024-52035 CVE-2024-54028     Debian Bug     : 1107168

    Several vulnerabilities were discovered in catdoc, a text extractor for     MS-Office files, which may result in denial of service or the execution     of arbitrary code if a specially crafted file is processed.

    For the stable distribution (bookworm), these problems have been fixed     in version 1:0.95-6~deb12u1.

    We recommend that you upgrade your catdoc packages.

    For the detailed security status of catdoc please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/catdoc

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dsa-5953 : catdoc - security update

high Nessus Plugin ID 240918

Version 1.1