Debian dla-4490 : libcrypto1.1-udeb - security update

high Nessus Plugin ID 299860

Synopsis

The remote Debian host is missing one or more security-related updates.

Description

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4490 advisory.

------------------------------------------------------------------------- Debian LTS Advisory DLA-4490-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson February 23, 2026 https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package : openssl Version : 1.1.1w-0+deb11u5 CVE ID : CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 CVE-2025-69421 CVE-2026-22795 CVE-2026-22796 Debian Bug :

Aisle Research found multiple vulnerabilites in OpenSSL, a Secure Socket Layer toolkit providing the SSL and TLS cryptographic protocols for secure communication over the Internet.

CVE-2025-68160

Petr Simecek (Aisle Research) and Stanislav Fort (Aisle Research) found writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. This out-of-bounds write can cause memory corruption which typically results in a crash, leading to Denial of Service for an application.

CVE-2025-69418

Stanislav Fort (Aisle Research) found using the low-level OCB API directly with AES-NI or other hardware-accelerated code paths, inputs whose length is not a multiple of 16 bytes can leave the final partial block unencrypted and unauthenticated. The trailing 1-15 bytes of a message may be exposed in cleartext on encryption and are not covered by the authentication tag, allowing an attacker to read or tamper with those bytes without detection.

CVE-2025-69419

Stanislav Fort (Aisle Research) found a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) can lead to out-of-bounds write causing a memory corruption which can have various consequences including a Denial of Service.

CVE-2025-69420

Luigino Camastra (Aisle Research) found a type confusion vulnerability exists in the TimeStamp Response verification code, leading to an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. The result is a possible Denial of Service.

CVE-2025-69421

Luigino Camastra (Aisle Research) found out processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function that can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files.

CVE-2026-22795

Luigino Camastra (Aisle Research) found that an application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service.

CVE-2026-22796

Luigino Camastra (Aisle Research) found that an application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service.

More details are available in:
https://openssl-library.org/news/secadv/20260127.txt

For Debian 11 bullseye, these problems have been fixed in version 1.1.1w-0+deb11u5.

We recommend that you upgrade your openssl packages.

For the detailed security status of openssl please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/openssl

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS Attachment:
signature.asc Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Upgrade the libcrypto1.1-udeb packages.

Plugin Details

Severity: High

ID: 299860

File Name: debian_DLA-4490.nasl

Version: 1.1

Type: local

Agent: unix

Family: Debian Local Security Checks

Published: 2/24/2026

Updated: 2/24/2026

Supported Sensors: Continuous Assessment, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.0

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2025-69421

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:debian:debian_linux:11.0, p-cpe:/a:debian:debian_linux:libssl-dev, p-cpe:/a:debian:debian_linux:libssl1.1-udeb, p-cpe:/a:debian:debian_linux:libssl-doc, p-cpe:/a:debian:debian_linux:libssl1.1, p-cpe:/a:debian:debian_linux:openssl, p-cpe:/a:debian:debian_linux:libcrypto1.1-udeb

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Exploit Ease: No known exploits are available

Patch Publication Date: 2/23/2026

Vulnerability Publication Date: 4/9/2024

Reference Information

CVE: CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796

IAVA: 2026-A-0087

Detections

Analytics