The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6017 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6017-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     October 03, 2025                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : haproxy     CVE ID         : CVE-2025-11230

    Oula Kivalo reported that HAProxy, a fast and reliable load balancing     reverse proxy, is prone to a denial of service vulnerability when     parsing JSON numbers.

    For the oldstable distribution (bookworm), this problem has been fixed     in version 2.6.12-1+deb12u3.

    For the stable distribution (trixie), this problem has been fixed in     version 3.0.11-1+deb13u1.

    We recommend that you upgrade your haproxy packages.

    For the detailed security status of haproxy please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/haproxy

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dsa-6017 : haproxy - security update

high Nessus Plugin ID 266463

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Oct 10, 2025, 10:40 PM Plugin metadata (Add IAVM info) Plugin Feed: 202510102240
Version 1.3 Oct 10, 2025, 10:43 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510101043
Version 1.2 Oct 10, 2025, 2:37 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510100237
Version 1.1 Oct 3, 2025, 10:49 PM New Plugin Feed: 202510032249