The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4666 advisory.

    - -----------------------------------------------------------------------     Debian LTS Advisory DLA-4666-1              debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Utkarsh Gupta     July 04, 2026                               https://wiki.debian.org/LTS
    - -----------------------------------------------------------------------

    Package        : openvpn     Version        : 2.6.14-0+deb12u2     CVE ID         : CVE-2026-11771 CVE-2026-12932 CVE-2026-12996 CVE-2026-13117                      CVE-2026-13122 CVE-2026-13698

    Multiple security vulnerabilities were discovered in OpenVPN, which     could result in denial of service.

    For Debian 12 bookworm, these problems have been fixed in version     2.6.14-0+deb12u2.

    We recommend that you upgrade your openvpn packages.

    For the detailed security status of openvpn please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/openvpn

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-4666 : openvpn - security update

medium Nessus Plugin ID 325054

Version 1.2