The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0993 advisory.

    This advisory aggregates security fixes for the bind SRPM in CIQ LTS 8.8. It addresses 3 CVEs:
    CVE-2023-4408, CVE-2023-50868, CVE-2023-50387.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the unbound package has been released.

An update of the dnsmasq package has been released.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.100187 advisory.

  - A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside     the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to     port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to     manipulate a running instance, potentially altering forwarders, allowing them to track all queries     forwarded by the local resolver, and, in some cases, disrupting resolving altogether. (CVE-2024-1488)

  - Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact. (CVE-2021-41043)

  - Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote     attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the     KeyTrap issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the     protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG     records. (CVE-2023-50387)

  - The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped)     allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC     responses in a random subdomain attack, aka the NSEC3 issue. The RFC 5155 specification implies that an     algorithm must perform thousands of iterations of a hash function in certain situations. (CVE-2023-50868)

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5039227. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability     (CVE-2024-30097)

  - Windows Remote Access Connection Manager Information Disclosure Vulnerability (CVE-2024-30069)

  - Windows Container Manager Service Elevation of Privilege Vulnerability (CVE-2024-30076)

  - Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (CVE-2024-30080)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5039236. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability     (CVE-2024-30097)

  - Windows Remote Access Connection Manager Information Disclosure Vulnerability (CVE-2024-30069)

  - Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability (CVE-2024-30072)

  - Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (CVE-2024-30080)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
357087	Rocky Linux 8.8 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (ciqsa-2026_0993)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
333040	Photon OS 5.0: Unbound PHSA-2026-5.0-92-0943	Nessus	PhotonOS Local Security Checks	2026/8/6	2026/11/2	high
334105	Photon OS 5.0: Dnsmasq PHSA-2026-5.0-90-0866	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/11/2	high
332201	Photon OS 5.0: Unbound PHSA-2024-5.0-91-0205	Nessus	PhotonOS Local Security Checks	2026/8/5	2026/11/2	high
206821	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.100187)	Nessus	Misc.	2024/9/9	2025/10/6	critical
200336	KB5039227: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (June 2024)	Nessus	Windows : Microsoft Bulletins	2024/6/11	2026/2/2	high
200352	KB5039236: Windows Server version 23H2 Security Update (June 2024)	Nessus	Windows : Microsoft Bulletins	2024/6/11	2026/2/6	high

検出

プラグインの検索

high

high

high

high

critical

high

high