According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC     validator that can lead to a crash given malicious upstream replies. When Unbound constructs chase-reply     messages for validation, the code uses the wrong counter to calculate write offsets for ADDITIONAL section     rrsets. DNAME duplication could increase the ANSWER section count and authority filtering could decrease     the AUTHORITY section count and create an uninitialized array slot. Combining these two, the validator     later dereferences this uninitialized pointer, causing an immediate process crash. An adversary     controlling a DNSSEC-signed domain can trigger this bug with a single query by configuring a DNAME chain     with unsigned CNAMEs and a response containing unsigned AUTHORITY records alongside signed ADDITIONAL glue     records. Unbound 1.25.1 contains a patch with a fix to use the proper counters to calculate the write     offsets.(CVE-2026-42959)

    NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records     for the authority section. Promiscuous RRSets that complement DNS replies in the authority section can be     used to trick Unbound to cache such records. If an adversary is able to attach such records in a reply     (i.e., spoofed packet, fragmentation attack) he would be able to poison Unbound's cache. A malicious actor     can exploit the possible poisonous effect by injecting RRSets other than NS that are also accompanied by     address records in a reply, for example MX. This could be achieved by trying to spoof a reply packet or     fragmentation attacks. Unbound would then accept the relative address records in the additional section     and cache them if the authority RRSet has enough trust at this point, i.e., in-zone data for the     delegation point. Unbound 1.25.1 contains a patch with a fix that disregards address records from the     additional section if they are not explicitly relevant only to authority NS records, mitigating the     possible poison effect. This is a complement fix to CVE-2025-11411.(CVE-2026-42960)

    NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack     related to parsing long lists of incoming EDNS options. An adversary sending queries with too many EDNS     options can hold Unbound threads hostage while they are parsing and creating internal data structures for     the options. Coordinated attacks can result in degradation and/or denial of service. Unbound 1.25.1     contains a patch with a fix to limit acceptable incoming EDNS options (100).(CVE-2026-41292)

    NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator     that enables denial of service and possible remote code execution as a result of deep copying a data     structure and erroneously overwriting a destination pointer. An adversary can exploit the vulnerability by     controlling a malicious signed zone and querying a vulnerable Unbound. When DS sub-queries need to suspend     validation due to NSEC3 computational budget exhaustion (introduced in Unbound 1.19.1), Unbound deep-     copies response messages to preserve them across memory region teardown. A struct-assignment bug     overwrites the destination's pointer with the source's pointer. After the sub-query region is freed, the     resumed validator dereferences this dangling pointer, triggering a crash or potentially enabling arbitrary     code execution. Unbound 1.25.1 contains a patch with a fix to preserve the correct pointer when deep     copying the data structure.(CVE-2026-33278)

Tenable has extracted the preceding description block directly from the EulerOS unbound security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779961008 advisory.

  - NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records     for the authority section. Promiscuous RRSets that complement DNS replies in the authority section can be     used to trick Unbound to cache such records. If an adversary is able to attach such records in a reply     (i.e., spoofed packet, fragmentation attack) he would be able to poison Unbound's cache. A malicious actor     can exploit the possible poisonous effect by injecting RRSets other than NS that are also accompanied by     address records in a reply, for example MX. This could be achieved by trying to spoof a reply packet or     fragmentation attacks. Unbound would then accept the relative address records in the additional section     and cache them if the authority RRSet has enough trust at this point, i.e., in-zone data for the     delegation point. Unbound 1.25.1 contains a patch with a fix that disregards address records from the     additional section if they are not explicitly relevant only to authority NS records, mitigating the     possible poison effect. This is a complement fix to CVE-2025-11411. (CVE-2026-42960)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the unbound package has been released.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1369 advisory.

    This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 9.6. It addresses 28 CVEs:
    CVE-2026-42534, CVE-2026-32792, CVE-2011-4528, CVE-2014-8602, CVE-2025-11411, and 23 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1371 advisory.

    This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 9.2. It addresses 16 CVEs:
    CVE-2026-42534, CVE-2026-32792, CVE-2025-11411, CVE-2026-42960, CVE-2026-41292, and 11 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1370 advisory.

    This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 9.4. It addresses 15 CVEs:
    CVE-2026-42534, CVE-2026-32792, CVE-2025-11411, CVE-2026-42960, CVE-2026-41292, and 10 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1793169702 advisory.

  - Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc. NOTE: The     vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound     installation cannot be remotely or locally exploited (CVE-2019-25032)

  - Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro. NOTE:
    The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound     installation cannot be remotely or locally exploited (CVE-2019-25033)

  - Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor     disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation     cannot be remotely or locally exploited (CVE-2019-25036)

  - Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid     packet. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a     running Unbound installation cannot be remotely or locally exploited (CVE-2019-25037)

  - Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor     disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation     cannot be remotely or locally exploited (CVE-2019-25040)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:97497 advisory.

    The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

    Security Fix(es):

    * unbound: Unbound DNS Cache Poisoning via Promiscuous Additional Section RRSet Acceptance     (CVE-2026-42960)

    * unbound: Unbound DNSSEC Validator NSEC3 Hash Calculation Limit Bypass via Negative Cache Code Path     Leading to DoS (CVE-2026-42923)

    * unbound: Unbound: Denial of Service due to locking inconsistency during RPZ XFR reload (CVE-2026-44608)

    Bug Fix(es) and Enhancement(s):

    * Update to latest 1.26 [rhel-9] (JIRA:RHEL-246537)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
326638	EulerOS 2.0 SP10 : unbound (EulerOS-SA-2026-2676)	Nessus	Huawei Local Security Checks	2026/7/14	2026/9/14	critical
360410	Rocky Linux 9.6 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-dracut / etc (ALMALINUX9.6:CLSA-2026:1779961008)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/2	high
332204	Photon OS 5.0: Unbound PHSA-2026-5.0-90-0862	Nessus	PhotonOS Local Security Checks	2026/8/5	2026/11/2	critical
354372	Rocky Linux 9.6 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (ciqsa-2026_1369)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
355046	Rocky Linux 9.2 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (ciqsa-2026_1371)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
356028	Rocky Linux 9.4 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (ciqsa-2026_1370)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
374849	CentOS Linux 6 [TuxCare] Security Update: unbound / unbound-devel / unbound-libs / unbound-python Multiple Vulnerabilities (CENTOS6:CLSA-2026:1793169702)	Nessus	CentOS Local Security Checks	2026/11/1	2026/11/1	critical
378202	RHEL 9 : unbound (RHSA-2026:97497)	Nessus	Red Hat Local Security Checks	2026/11/10	2026/11/12	high

検出

プラグインの検索

critical

high

critical

high

high

high

critical

high