The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2794-1 advisory.

    - CVE-2023-2828: Fixed denial-of-service against recursive resolvers related to cache-cleaning algorithm     (bsc#1212544).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2836-1 advisory.

    Update to release 9.16.42

    Security Fixes:

    * The overmem cleaning process has been improved, to prevent the       cache from significantly exceeding the configured       max-cache-size limit. (CVE-2023-2828)
    * A query that prioritizes stale data over lookup triggers a       fetch to refresh the stale data in cache. If the fetch is       aborted for exceeding the recursion quota, it was possible for       named to enter an infinite callback loop and crash due to stack       overflow. This has been fixed. (CVE-2023-2911)

    Bug Fixes:

    * Previously, it was possible for a delegation from cache to be       returned to the client after the stale-answer-client-timeout       duration. This has been fixed.  [bsc#1212544, bsc#1212567, jsc#SLE-24600]

    Update to release 9.16.41

    Bug Fixes:

    * When removing delegations from an opt-out range,       empty-non-terminal NSEC3 records generated by those delegations       were not cleaned up. This has been fixed.  [jsc#SLE-24600]

    Update to release 9.16.40

    Bug Fixes:

    * Logfiles using timestamp-style suffixes were not always       correctly removed when the number of files exceeded the limit       set by versions. This has been fixed for configurations which       do not explicitly specify a directory path as part of the file       argument in the channel specification.
    * Performance of DNSSEC validation in zones with many DNSKEY       records has been improved.

    Update to release 9.16.39

    Feature Changes:

    * libuv support for receiving multiple UDP messages in a single       recvmmsg() system call has been tweaked several times between       libuv versions 1.35.0 and 1.40.0; the current recommended libuv       version is 1.40.0 or higher. New rules are now in effect for       running with a different version of libuv than the one used at       compilation time. These rules may trigger a fatal error at       startup:
      - Building against or running with libuv versions 1.35.0 and         1.36.0 is now a fatal error.
      - Running with libuv version higher than 1.34.2 is now a         fatal error when named is built against libuv version         1.34.2 or lower.
      - Running with libuv version higher than 1.39.0 is now a         fatal error when named is built against libuv version         1.37.0, 1.38.0, 1.38.1, or 1.39.0.

    * This prevents the use of libuv versions that may trigger an       assertion failure when receiving multiple UDP messages in a       single system call.

    Bug Fixes:

    * named could crash with an assertion failure when adding a new       zone into the configuration file for a name which was already       configured as a member zone for a catalog zone. This has been       fixed.
    * When named starts up, it sends a query for the DNSSEC key for       each configured trust anchor to determine whether the key has       changed. In some unusual cases, the query might depend on a       zone for which the server is itself authoritative, and would       have failed if it were sent before the zone was fully loaded.
      This has now been fixed by delaying the key queries until all       zones have finished loading. [jsc#SLE-24600]

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6183-2 advisory.

    USN-6183-1 fixed vulnerabilities in Bind. This update provides the corresponding updates for Ubuntu 14.04     LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4100 advisory.

    [32:9.16.23-14.1]
    - Improve RBT overmem cache cleaning (CVE-2023-2828)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 10.0. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0 advisory.

  - A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in     ntfs_get_attribute_value, in NTFS-3G < 2021.8.22. (CVE-2021-39263)

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

  - Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a     denial of service via a crafted script. (CVE-2020-24736)

  - Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and     1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files     outside of what it would otherwise have access to, which is an attack on integrity and confidentiality.
    When `persistent=subdir` is used in the application permissions (represented as `--persist=subdir` in the     command-line interface), that means that an application which otherwise doesn't have access to the real     user home directory will see an empty home directory with a writeable subdirectory `subdir`. Behind the     scenes, this directory is actually a bind mount and the data is stored in the per-application directory as     `~/.var/app/$APPID/subdir`. This allows existing apps that are not aware of the per-application directory     to still work as intended without general home directory access. However, the application does have write     access to the application directory `~/.var/app/$APPID` where this directory is stored. If the source     directory for the `persistent`/`--persist` option is replaced by a symlink, then the next time the     application is started, the bind mount will follow the symlink and mount whatever it points to into the     sandbox. Partial protection against this vulnerability can be provided by patching Flatpak using the     patches in commits ceec2ffc and 98f79773. However, this leaves a race condition that could be exploited by     two instances of a malicious app running in parallel. Closing the race condition requires updating or     patching the version of bubblewrap that is used by Flatpak to add the new `--bind-fd` option using the     patch and then patching Flatpak to use it. If Flatpak has been configured at build-time with     `-Dsystem_bubblewrap=bwrap` (1.15.x) or `--with-system-bubblewrap=bwrap` (1.14.x or older), or a similar     option, then the version of bubblewrap that needs to be patched is a system copy that is distributed     separately, typically `/usr/bin/bwrap`. This configuration is the one that is typically used in Linux     distributions. If Flatpak has been configured at build-time with `-Dsystem_bubblewrap=` (1.15.x) or with     `--without-system-bubblewrap` (1.14.x or older), then it is the bundled version of bubblewrap that is     included with Flatpak that must be patched. This is typically installed as `/usr/libexec/flatpak-bwrap`.
    This configuration is the default when building from source code. For the 1.14.x stable branch, these     changes are included in Flatpak 1.14.10. The bundled version of bubblewrap included in this release has     been updated to 0.6.3. For the 1.15.x development branch, these changes are included in Flatpak 1.15.10.
    The bundled version of bubblewrap in this release is a Meson wrap subproject, which has been updated to     0.10.0. The 1.12.x and 1.10.x branches will not be updated for this vulnerability. Long-term support OS     distributions should backport the individual changes into their versions of Flatpak and bubblewrap, or     update to newer versions if their stability policy allows it. As a workaround, avoid using applications     using the `persistent` (`--persist`) permission. (CVE-2024-42472)

  - Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote     attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the     KeyTrap issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the     protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG     records. (CVE-2023-50387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0821 advisory.

    This advisory aggregates security fixes for the bind9.16 SRPM in CIQ LTS 8.6. It addresses 13 CVEs:
    CVE-2022-3094, CVE-2023-5517, CVE-2023-3341, CVE-2023-50868, CVE-2023-4408, and 8 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the bindutils package has been released.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0388 advisory.

    This advisory aggregates security fixes for the bind SRPM in CIQ LTS 9.2. It addresses 42 CVEs:
    CVE-2009-0696, CVE-2018-5738, CVE-2006-4095, CVE-2022-3080, CVE-2022-3094, and 37 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
178047	SUSE SLES15: bind / bind-chrootenv / bind-devel / bind-devel-32bit / bind-doc / etc (SUSE-SU-2023:2794-1)	Nessus	SuSE Local Security Checks	2023/7/8	2026/6/25	high
178316	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : bind (SUSE-SU-2023:2836-1)	Nessus	SuSE Local Security Checks	2023/7/15	2026/6/26	high
178445	Ubuntu 16.04 ESM / 18.04 ESM : Bind vulnerability (USN-6183-2)	Nessus	Ubuntu Local Security Checks	2023/7/18	2025/9/3	high
178576	Oracle Linux 8 : bind9.16 (ELSA-2023-4100)	Nessus	Oracle Linux Local Security Checks	2023/7/20	2025/9/9	high
310786	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0)	Nessus	Misc.	2026/4/29	2026/8/13	medium
355217	Rocky Linux 8.6 [CIQ] Security Update: bind9.16 / bind9.16-chroot / bind9.16-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0821)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	medium
204566	Photon OS 4.0: Bindutils PHSA-2023-4.0-0417	Nessus	PhotonOS Local Security Checks	2024/7/24	2026/11/2	high
356595	Rocky Linux 9.2 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (ciqsa-2026_0388)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	medium

検出

プラグインの検索

high

high

high

high

medium

medium

high

medium