The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5167 advisory.

  - A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus     Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker     can enter an environment in which the Linux user namespace is still the initial user namespace, the     NO_NEW_PRIVS prctl is not activated, and the entered mount namespace is under the attacker's control. In     this way, the filesystem layout can be adjusted to gain root privileges through execution of available     setuid-root binaries such as su or sudo. (CVE-2022-31214)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5168 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3057 advisory.

  - Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows     sensitive information disclosure via a timing attack against lib/RT/REST2/Middleware/Auth.pm.
    (CVE-2021-38562)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3056 advisory.

  - XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an     attacker-controlled FTP server. (CVE-2022-32278)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3055 advisory.

  - An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between     NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite. (CVE-2022-30783)

  - A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.
    (CVE-2022-30784)

  - A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory     read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite. (CVE-2022-30785)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through     2021.8.22. (CVE-2022-30786)

  - An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through     2021.8.22 when using libfuse-lite. (CVE-2022-30787)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through     2021.8.22. (CVE-2022-30788)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G     through 2021.8.22. (CVE-2022-30789)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5166 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3054 advisory.

  - In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in     iso9660_proc_dir() in tsk/fs/iso9660_dent.c in libtskfs.a, as demonstrated by fls. (CVE-2017-13755)

  - In The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers infinite recursion in     dos_load_ext_table() in tsk/vs/dos.c in libtskvs.a, as demonstrated by mmls. (CVE-2017-13756)

  - In The Sleuth Kit (TSK) 4.4.2, fls hangs on a corrupt exfat image in tsk_img_read() in tsk/img/img_io.c in     libtskimg.a. (CVE-2017-13760)

  - In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a     key length is too large, which allows attackers to cause a denial of service (SEGV on unknown address with     READ memory access in a tsk_getu16 call in hfs_dir_open_meta_cb in tsk/fs/hfs_dent.c). (CVE-2018-19497)

  - The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted disk     image triggers crash in tsk/fs/hfs_dent.c:237. The component is: Overflow in fls tool used on HFS image.
    Bug is in tsk/fs/hfs.c file in function hfs_cat_traverse() in lines: 952, 1062. The attack vector is:
    Victim must open a crafted HFS filesystem image. (CVE-2019-1010065)

  - In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in     the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c. (CVE-2020-10232)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3053 advisory.

  - vim is vulnerable to Heap-based Buffer Overflow (CVE-2021-3903)

  - Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2. (CVE-2022-0417)

  - Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. (CVE-2022-0943)

  - Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This     vulnerability is capable of crashing the software, memory modification, and possible remote execution.
    (CVE-2022-1720)

  - Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. (CVE-2022-1851, CVE-2022-2126)

  - Use After Free in GitHub repository vim/vim prior to 8.2. (CVE-2022-1898, CVE-2022-1968)

  - Buffer Over-read in GitHub repository vim/vim prior to 8.2. (CVE-2022-2124)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5165 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5164 advisory.

  - XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an     attacker-controlled FTP server. (CVE-2022-32278)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3052 advisory.

  - Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request     may be interpreted in the authentication context of an unrelated previous request that arrived over the     same connection. (CVE-2019-18928)

  - Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang)     via input that is mishandled during hash-table interaction. Because there are many insertions into a     single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16. (CVE-2021-33582)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3051 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3046 advisory.

  - A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft     dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a     malicious file to trigger this vulnerability. (CVE-2021-21897)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5161 advisory.

  - A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in     the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or     CAP_SYS_RAWIO) to create issues with confidentiality. (CVE-2022-0494)

  - A memory leak flaw was found in the Linux kernel's DMA subsystem, in the way a user calls DMA_FROM_DEVICE.
    This flaw allows a local user to read random memory from the kernel space. (CVE-2022-0854)

  - A use-after-free flaw was found in the Linux kernel's io_uring subsystem in the way a user sets up a ring     with IORING_SETUP_IOPOLL with more than one task completing submissions on this ring. This flaw allows a     local user to crash or escalate their privileges on the system. (CVE-2022-1786)

  - With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID     is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference.
    (CVE-2022-1789)

  - A use-after-free vulnerability was found in the Linux kernel's Netfilter subsystem in     net/netfilter/nf_tables_api.c. This flaw allows a local attacker with user access to cause a privilege     escalation issue. (CVE-2022-1966)

  - KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown.
    An attacker with access to a serial port could trigger the debugger so it is important that the debugger     respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and     Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H). (CVE-2022-21499)

  - The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets     are in the intended state. (CVE-2022-28893)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5163 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5162 advisory.

  - Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug     was found in Moby (Docker Engine) prior to version 20.10.14 where containers were incorrectly started with     non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling     programs with inheritable file capabilities to elevate those capabilities to the permitted set during     `execve(2)`. Normally, when executable programs have specified permitted file capabilities, otherwise     unprivileged users and processes can execute those programs and gain the specified file capabilities up to     the bounding set. Due to this bug, containers which included executable programs with inheritable file     capabilities allowed otherwise unprivileged users and processes to additionally gain these inheritable     file capabilities up to the container's bounding set. Containers which use Linux users and groups to     perform privilege separation inside the container are most directly impacted. This bug did not affect the     container security sandbox as the inheritable set never contained more capabilities than were included in     the container's bounding set. This bug has been fixed in Moby (Docker Engine) 20.10.14. Running containers     should be stopped, deleted, and recreated for the inheritable capabilities to be reset. This fix changes     Moby (Docker Engine) behavior such that containers are started with a more typical Linux environment. As a     workaround, the entry point of a container can be modified to use a utility like `capsh(1)` to drop     inheritable capabilities prior to the primary process starting. (CVE-2022-24769)

  - containerd is an open source container runtime. A bug was found in the containerd's CRI implementation     where programs inside a container can cause the containerd daemon to consume memory without bound during     invocation of the `ExecSync` API. This can cause containerd to consume all available memory on the     computer, denying service to other legitimate workloads. Kubernetes and crictl can both be configured to     use containerd's CRI implementation; `ExecSync` may be used when running probes or when executing     processes via an exec facility. This bug has been fixed in containerd 1.6.6 and 1.5.13. Users should     update to these versions to resolve the issue. Users unable to upgrade should ensure that only trusted     images and commands are used. (CVE-2022-31030)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5160 advisory.

  - ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the     upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.
    (CVE-2021-46790)

  - An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between     NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite. (CVE-2022-30783)

  - A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.
    (CVE-2022-30784)

  - A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory     read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite. (CVE-2022-30785)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through     2021.8.22. (CVE-2022-30786)

  - An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through     2021.8.22 when using libfuse-lite. (CVE-2022-30787)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through     2021.8.22. (CVE-2022-30788)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G     through 2021.8.22. (CVE-2022-30789)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3050 advisory.

  - A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to     trigger a heap-based buffer overflow via a crafted .mkv file. (CVE-2020-26664)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5159 advisory.

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3049 advisory.

  - In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary     JavaScript for XSS. (CVE-2021-43331)

  - In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted     version of the list admin password. This could potentially be cracked by a moderator via an offline brute-     force attack. (CVE-2021-43332)

  - In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request     (using that token) to set a new admin password or make other changes. (CVE-2021-44227)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3048 advisory.

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5158 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5156 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3047 advisory.

  - avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via     /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create     arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects the     packaging for Debian GNU/Linux (used indirectly by SUSE), not the upstream Avahi product. (CVE-2021-26720)

  - A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the     client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing     a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the     availability of the avahi service, which becomes unresponsive after this flaw is triggered.
    (CVE-2021-3468)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3045 advisory.

  - lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document,     leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.
    (CVE-2022-26874)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3043 advisory.

  - An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can     redirect a client connection to a malicious server. The client will perform TLS certificate verification     of the malicious domain name instead of the original XMPP service domain, allowing the attacker to take     over control over the XMPP connection and to obtain user credentials and all communication content. This     is similar to CVE-2022-24968. (CVE-2022-26491)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3044 advisory.

  - An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take()     was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32,     causing unintended length truncation. (CVE-2021-27218)

  - An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has     an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow     could potentially lead to memory corruption. (CVE-2021-27219)

  - An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with     G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also     creates the target of the symlink as an empty file, which could conceivably have security relevance if the     symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents     of that file correctly remain unchanged.) (CVE-2021-28153)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3041 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3042 advisory.

  - On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier     and 0.104.2 and earlier was disclosed: A vulnerability in CHM file parser of Clam AntiVirus (ClamAV)     versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an     unauthenticated, remote attacker to cause a denial of service condition on an affected device. For a     description of this vulnerability, see the ClamAV blog. This advisory will be updated as additional     information becomes available. (CVE-2022-20770)

  - On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier     and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file parser of Clam AntiVirus (ClamAV)     versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an     unauthenticated, remote attacker to cause a denial of service condition on an affected device. For a     description of this vulnerability, see the ClamAV blog. This advisory will be updated as additional     information becomes available. (CVE-2022-20771)

  - On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier     and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus (ClamAV)     versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an     unauthenticated, remote attacker to cause a denial of service condition on an affected device. For a     description of this vulnerability, see the ClamAV blog. This advisory will be updated as additional     information becomes available. (CVE-2022-20785)

  - On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier     and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4,     0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of service     condition on an affected device. For a description of this vulnerability, see the ClamAV blog.
    (CVE-2022-20796)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3040 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5157 advisory.

  - In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line     argument could lead to local attackers gaining root privileges. (CVE-2022-27239)

  - cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal     sign) characters but is not a valid credentials file. (CVE-2022-29869)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3039 advisory.

  - PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the     pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can craft a PDF     which leads to an infinite loop if the PyPDF2 if the code attempts to get the content stream. The reason     is that the last while-loop in `ContentStream._readInlineImage` only terminates when it finds the `EI`     token, but never actually checks if the stream has already ended. This issue has been resolved in version     `1.27.5`. Users unable to upgrade should validate and PDFs prior to iterating over their content stream.
    (CVE-2022-24859)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3038 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3036 advisory.

  - PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12     and prior contain a denial-of-service vulnerability that affects PJSIP users that consume PJSIP's XML     parsing in their apps. Users are advised to update. There are no known workarounds. (CVE-2022-24763)

  - PJSIP is a free and open source multimedia communication library written in C. A denial-of-service     vulnerability affects applications on a 32-bit systems that use PJSIP versions 2.12 and prior to play/read     invalid WAV files. The vulnerability occurs when reading WAV file data chunks with length greater than     31-bit integers. The vulnerability does not affect 64-bit apps and should not affect apps that only plays     trusted WAV files. A patch is available on the `master` branch of the `pjsip/project` GitHub repository.
    As a workaround, apps can reject a WAV file received from an unknown source or validate the file first.
    (CVE-2022-24792)

  - PJSIP is a free and open source multimedia communication library written in C. A buffer overflow     vulnerability in versions 2.12 and prior affects applications that uses PJSIP DNS resolution. It doesn't     affect PJSIP users who utilize an external resolver. A patch is available in the `master` branch of the     `pjsip/pjproject` GitHub repository. A workaround is to disable DNS resolution in PJSIP config (by setting     `nameserver_count` to zero) or use an external resolver instead. (CVE-2022-24793)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5155 advisory.

  - In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in     WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.
    (CVE-2022-30293)

  - In WebKitGTK through 2.36.0 (and WPE WebKit), there is a use-after-free in     WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.
    (CVE-2022-30294)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5154 advisory.

  - In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in     WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.
    (CVE-2022-30293)

  - In WebKitGTK through 2.36.0 (and WPE WebKit), there is a use-after-free in     WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.
    (CVE-2022-30294)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3037 advisory.

  - In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due     to a missing bounds check. This could lead to remote code execution in an unprivileged process with no     additional execution privileges needed. User interaction is needed for exploitation.Product:
    AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338 (CVE-2019-2201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5153 advisory.

  - Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to     smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0.
    (CVE-2021-37147)

  - Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to     smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.0.1.
    (CVE-2021-37148)

  - Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to     smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0.
    (CVE-2021-37149)

  - Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server allows for man     in the middle attacks. This issue affects Apache Traffic Server 8.0.0 to 8.0.8. (CVE-2021-38161)

  - Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an     attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to     9.1.1. (CVE-2021-44040)

  - Improper Authentication vulnerability in TLS origin validation of Apache Traffic Server allows an attacker     to create a man in the middle attack. This issue affects Apache Traffic Server 8.0.0 to 8.1.0.
    (CVE-2021-44759)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3034 advisory.

  - An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14. Due     to a missing check when validating DNS responses, remote attackers might be able read the 16 bytes     corresponding to an AAAA record from the non-initialized part of the buffer, possibly accessing anything     that was left on the stack, or even past the end of the 8193-byte buffer, depending on the value of     accepted_payload_size. (CVE-2018-20102)

  - An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted     packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of     valid pointers resulting in stack exhaustion. (CVE-2018-20103)

  - A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header     missing the chunked value were not being correctly rejected. The impact was limited but if combined with     the http-reuse always setting, it could be used to help construct an HTTP request smuggling attack     against a vulnerable component employing a lenient parser that would ignore the content-length header as     soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).
    (CVE-2019-18277)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5150 advisory.

  - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap     buffer overflow when octet-counted framing is used. This can result in a segfault or some other     malfunction. As of our understanding, this vulnerability can not be used for remote code execution. But     there may still be a slight chance for experts to do that. The bug occurs when the octet count is read.
    While there is a check for the maximum number of octets, digits are written to a heap buffer even when the     octet count is over the maximum, This can be used to overrun the memory buffer. However, once the sequence     of digits stop, no additional characters can be added to the buffer. In our opinion, this makes remote     exploits impossible or at least highly complex. Octet-counted framing is one of two potential framing     modes. It is relatively uncommon, but enabled by default on receivers. Modules `imtcp`, `imptcp`,     `imgssapi`, and `imhttp` are used for regular syslog message reception. It is best practice not to     directly expose them to the public. When this practice is followed, the risk is considerably lower. Module     `imdiag` is a diagnostics module primarily intended for testbench runs. We do not expect it to be present     on any production installation. Octet-counted framing is not very common. Usually, it needs to be     specifically enabled at senders. If users do not need it, they can turn it off for the most important     modules. This will mitigate the vulnerability. (CVE-2022-24903)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3033 advisory.

  - Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from     application logic. Prior to versions 3.1.45 and 4.1.1, template authors could inject php code by choosing     a malicious {block} name or {include} file name. Sites that cannot fully trust template authors should     upgrade to versions 3.1.45 or 4.1.1 to receive a patch for this issue. There are currently no known     workarounds. (CVE-2022-29221)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5152 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5151 advisory.

  - Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from     application logic. Prior to versions 3.1.43 and 4.0.3, template authors could run restricted static php     methods. Users should upgrade to version 3.1.43 or 4.0.3 to receive a patch. (CVE-2021-21408)

  - Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox     mode. (CVE-2021-26119)

  - Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name=     substring. (CVE-2021-26120)

  - Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from     application logic. Prior to versions 3.1.42 and 4.0.2, template authors could run arbitrary PHP code by     crafting a malicious math string. If a math string was passed through as user provided data to the math     function, external users could run arbitrary PHP code by crafting a malicious math string. Users should     upgrade to version 3.1.42 or 4.0.2 to receive a patch. (CVE-2021-29454)

  - Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from     application logic. Prior to versions 3.1.45 and 4.1.1, template authors could inject php code by choosing     a malicious {block} name or {include} file name. Sites that cannot fully trust template authors should     upgrade to versions 3.1.45 or 4.1.1 to receive a patch for this issue. There are currently no known     workarounds. (CVE-2022-29221)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3032 advisory.

  - A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a     malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to     application availability. (CVE-2020-27818)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3035 advisory.

  - An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from     folders other than those specifically passed via the f_dir attribute. (CVE-2014-10401)

  - An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from     folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE:
    this issue exists because of an incomplete fix for CVE-2014-10401. (CVE-2014-10402)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3031 advisory.

  - ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with     nesting tens-of-thousands deep could result in the web server being unable to service legitimate requests.
    Even a moderately large (e.g., 300KB) HTTP request can occupy one of the limited NGINX worker processes     for minutes and consume almost all of the available CPU on the machine. Modsecurity 2 is similarly     vulnerable: the affected versions include 2.8.0 through 2.9.4. (CVE-2021-42717)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3030 advisory.

  - Zipios before 0.1.7 does not properly handle certain malformed zip archives and can go into an infinite     loop, causing a denial of service. This is related to zipheadio.h:readUint32() and     zipfile.cpp:Zipfile::Zipfile(). (CVE-2019-13453)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5149 advisory.

  - A logic issue was addressed with improved state management. This issue is fixed in Security Update     2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated     privileges. (CVE-2022-26691)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3029 advisory.

  - A logic issue was addressed with improved state management. This issue is fixed in Security Update     2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated     privileges. (CVE-2022-26691)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3028 advisory.

  - options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side     /etc/group data to a remote client. (CVE-2021-46671)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
162506	Debian DSA-5167-1 : firejail - security update	high
162505	Debian DSA-5168-1 : chromium - security update	critical
162504	Debian DLA-3057-1 : request-tracker4 - LTS security update	high
162488	Debian DLA-3056-1 : exo - LTS security update	critical
162427	Debian DLA-3055-1 : ntfs-3g - LTS security update	medium
162415	Debian DSA-5166-1 : slurm-wlm - security update	high
162408	Debian DLA-3054-1 : sleuthkit - LTS security update	critical
162406	Debian DLA-3053-1 : vim - LTS security update	high
162405	Debian DSA-5165-1 : vlc - security update	high
162403	Debian DSA-5164-1 : exo - security update	critical
162402	Debian DLA-3052-1 : cyrus-imapd - LTS security update	critical
162296	Debian DLA-3051-1 : tzdata - LTS security update	high
162167	Debian DLA-3046-1 : librecad - LTS security update	high
162159	Debian DSA-5161-1 : linux - security update	high
162152	Debian DSA-5163-1 : chromium - security update	critical
162143	Debian DSA-5162-1 : containerd - security update	medium
162126	Debian DSA-5160-1 : ntfs-3g - security update	critical
162125	Debian DLA-3050-1 : vlc - LTS security update	high
162013	Debian DSA-5159-1 : python-bottle - security update	critical
161990	Debian DLA-3049-1 : mailman - LTS security update	high
161962	Debian DLA-3048-1 : python-bottle - LTS security update	critical
161961	Debian DSA-5158-1 : thunderbird - security update	high
161960	Debian DSA-5156-1 : firefox-esr - security update	high
161940	Debian DLA-3047-1 : avahi - LTS security update	high
161913	Debian DLA-3045-1 : php-horde-mime-viewer - LTS security update	medium
161907	Debian DLA-3043-1 : pidgin - LTS security update	medium
161906	Debian DLA-3044-1 : glib2.0 - LTS security update	medium
161838	Debian DLA-3041-1 : thunderbird - LTS security update	high
161837	Debian DLA-3042-1 : clamav - LTS security update	high
161836	Debian DLA-3040-1 : firefox-esr - LTS security update	high
161807	Debian DSA-5157-1 : cifs-utils - security update	high
161806	Debian DLA-3039-1 : pypdf2 - LTS security update	medium
161802	Debian DLA-3038-1 : debian-security-support - LTS security update	high
161794	Debian DLA-3036-1 : pjproject - LTS security update	high
161751	Debian DSA-5155-1 : wpewebkit - security update	critical
161747	Debian DSA-5154-1 : webkit2gtk - security update	critical
161725	Debian DLA-3037-1 : libjpeg-turbo - LTS security update	high
161703	Debian DSA-5153-1 : trafficserver - security update	high
161700	Debian DLA-3034-1 : haproxy - LTS security update	high
161689	Debian DSA-5150-1 : rsyslog - security update	high
161688	Debian DLA-3033-1 : smarty3 - LTS security update	high
161687	Debian DSA-5152-1 : spip - security update	high
161686	Debian DSA-5151-1 : smarty3 - security update	critical
161685	Debian DLA-3032-1 : pngcheck - LTS security update	low
161684	Debian DLA-3035-1 : libdbi-perl - LTS security update	medium
161656	Debian DLA-3031-1 : modsecurity-apache - LTS security update	high
161655	Debian DLA-3030-1 : zipios++ - LTS security update	medium
161636	Debian DSA-5149-1 : cups - security update	medium
161628	Debian DLA-3029-1 : cups - LTS security update	medium
161624	Debian DLA-3028-1 : atftp - LTS security update	medium

Debian Local Security Checks Family for Nessus

high

critical

high

critical

medium

high

critical

high

high

critical

critical

high

high

high

critical

medium

critical

high

critical

high

critical

high

high

high

medium

medium

medium

high

high

high

high

medium

high

high

critical

critical

high

high

high

high

high

high

critical

low

medium

high

medium

medium

medium

medium