遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2022: 7622 公告中提及的多個弱點影響。

  - unbound：新型 ghost 網域攻擊，惡意攻擊者可以觸發惡意網域名稱持續解析 (CVE-2022-30698、CVE-2022-30699)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

因此，它受到 ALAS2023-2023-078 公告中所提及的多個弱點影響。

  - NLnet Labs Unbound 1.16.1 及其之前的所有版本容易受到新型幽靈網域名稱攻擊。此弱點的攻擊目標是 Unbound 執行個體。攻擊者可使用 Unbound 查詢惡意網域名稱的子網域。惡意名稱伺服器會傳回此子網域的委派資訊並更新 Unbound 的委派快取。藉由向 Unbound 查詢惡意名稱伺服器提供新委派資訊涉及的二級子網域，可在委派資訊到期之前重複此動作。由於 Unbound 是以子項為中心的解析器，因此不斷更新的子項委派資訊可使惡意網域名稱在撤銷後很長一段時間內仍可解析。從 1.16.2 版開始，Unbound 會先檢查父項委派記錄的有效性，然後再使用快取的委派資訊。
    (CVE-2022-30698)

  - NLnet Labs Unbound 1.16.1 及其之前的所有版本容易受到新型幽靈網域名稱攻擊。此弱點的攻擊目標是 Unbound 執行個體。快取的委派資訊即將到期時，向 Unbound 查詢惡意網域名稱。惡意名稱伺服器會延遲回應，使快取的委派資訊過期。收到包含委派資訊的延遲回應時，Unbound 會覆寫現已過期的項目。當委派資訊即將到期時，攻擊者可重複此動作，使惡意委派資訊不斷更新。從 1.16.2 版開始，Unbound 會儲存查詢的開始時間，並使用該時間來決定是否可以覆寫快取的委派資訊。(CVE-2022-30699)

  - 在多個 DNS 解析軟體中發現名為「無回應委派攻擊」(NRDelegation Attack) 的弱點。NRDelegation 攻擊的運作方式是將惡意委派與大量無回應的名稱伺服器搭配使用。攻擊者會先查詢解析器中是否有依賴無回應的名稱伺服器的記錄。此攻擊可造成解析器花費大量時間/資源來解析存在大量無回應 NS 記錄的惡意委派點下的記錄。它會在某些解析器實作中觸發高 CPU 使用率，這些解析器實作會持續在快取中尋找該委派中已解析的 NS 記錄。這可導致效能降低，並最終在精心策劃的攻擊中造成拒絕服務。Unbound 不會受到高 CPU 使用率的影響，但解析惡意委派仍然需要資源。Unbound 會不斷嘗試解析記錄，直到達到硬性限制為止。根據攻擊的性質和回覆，可達到不同的限制。從 1.16.3 版開始，Unbound 引入了修正程式，透過減少名稱伺服器探索和 DNSKEY 預先擷取的機會查詢，並限制委派點針對遺漏記錄發出快取查閱的次數，可以提升負載不足時的效能。
    (CVE-2022-3204)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端主機上安裝的 unbound 為 1.7.3-15 之前版本。因此，會受到 ALAS2-2024-2468 公告中所提及的多個弱點影響。

  - NLnet Labs Unbound 1.16.1 及其之前的所有版本容易受到新型幽靈網域名稱攻擊。此弱點的攻擊目標是 Unbound 執行個體。攻擊者可使用 Unbound 查詢惡意網域名稱的子網域。惡意名稱伺服器會傳回此子網域的委派資訊並更新 Unbound 的委派快取。藉由向 Unbound 查詢惡意名稱伺服器提供新委派資訊涉及的二級子網域，可在委派資訊到期之前重複此動作。由於 Unbound 是以子項為中心的解析器，因此不斷更新的子項委派資訊可使惡意網域名稱在撤銷後很長一段時間內仍可解析。從 1.16.2 版開始，Unbound 會先檢查父項委派記錄的有效性，然後再使用快取的委派資訊。
    (CVE-2022-30698)

  - NLnet Labs Unbound 1.16.1 及其之前的所有版本容易受到新型幽靈網域名稱攻擊。此弱點的攻擊目標是 Unbound 執行個體。快取的委派資訊即將到期時，向 Unbound 查詢惡意網域名稱。惡意名稱伺服器會延遲回應，使快取的委派資訊過期。收到包含委派資訊的延遲回應時，Unbound 會覆寫現已過期的項目。當委派資訊即將到期時，攻擊者可重複此動作，使惡意委派資訊不斷更新。從 1.16.2 版開始，Unbound 會儲存查詢的開始時間，並使用該時間來決定是否可以覆寫快取的委派資訊。(CVE-2022-30699)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the 'ghost domain     names' attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a     subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain     that updates Unbound's delegation cache. This action can be repeated before expiry of the delegation     information by querying Unbound for a second level subdomain which the rogue nameserver provides new     delegation information. Since Unbound is a child-centric resolver, the ever-updating child delegation     information can keep a rogue domain name resolvable long after revocation. From version 1.16.2 on, Unbound     checks the validity of parent delegation records before using cached delegation information.
    (CVE-2022-30698)

  - NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the 'ghost domain     names' attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue     domain name when the cached delegation information is about to expire. The rogue nameserver delays the     response so that the cached delegation information is expired. Upon receiving the delayed answer     containing the delegation information, Unbound overwrites the now expired entries. This action can be     repeated when the delegation information is about to expire making the rogue delegation information ever-     updating. From version 1.16.2 on, Unbound stores the start time for a query and uses that to decide if the     cached delegation information can be overwritten. (CVE-2022-30699)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7622 advisory.

  - unbound:  the novel ghost domain where malicious users to trigger continued resolvability of malicious     domain names (CVE-2022-30698)

  - unbound: novel ghost domain attack where malicious users to trigger continued resolvability of malicious     domain names (CVE-2022-30699)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7622 advisory.

  - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the ghost domain     names attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a     subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain     that updates Unbound's delegation cache. This action can be repeated before expiry of the delegation     information by querying Unbound for a second level subdomain which the rogue nameserver provides new     delegation information. Since Unbound is a child-centric resolver, the ever-updating child delegation     information can keep a rogue domain name resolvable long after revocation. From version 1.16.2 on, Unbound     checks the validity of parent delegation records before using cached delegation information.
    (CVE-2022-30698)

  - NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the ghost domain     names attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue     domain name when the cached delegation information is about to expire. The rogue nameserver delays the     response so that the cached delegation information is expired. Upon receiving the delayed answer     containing the delegation information, Unbound overwrites the now expired entries. This action can be     repeated when the delegation information is about to expire making the rogue delegation information ever-     updating. From version 1.16.2 on, Unbound stores the start time for a query and uses that to decide if the     cached delegation information can be overwritten. (CVE-2022-30699)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the 'ghost domain     names' attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a     subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain     that updates Unbound's delegation cache. This action can be repeated before expiry of the delegation     information by querying Unbound for a second level subdomain which the rogue nameserver provides new     delegation information. Since Unbound is a child-centric resolver, the ever-updating child delegation     information can keep a rogue domain name resolvable long after revocation. From version 1.16.2 on, Unbound     checks the validity of parent delegation records before using cached delegation information.
    (CVE-2022-30698)

  - NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the 'ghost domain     names' attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue     domain name when the cached delegation information is about to expire. The rogue nameserver delays the     response so that the cached delegation information is expired. Upon receiving the delayed answer     containing the delegation information, Unbound overwrites the now expired entries. This action can be     repeated when the delegation information is about to expire making the rogue delegation information ever-     updating. From version 1.16.2 on, Unbound stores the start time for a query and uses that to decide if the     cached delegation information can be overwritten. (CVE-2022-30699)

  - A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in     various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a     considerable number of non responsive nameservers. The attack starts by querying a resolver for a record     that relies on those unresponsive nameservers. The attack can cause a resolver to spend a lot of     time/resources resolving records under a malicious delegation point where a considerable number of     unresponsive NS records reside. It can trigger high CPU usage in some resolver implementations that     continually look in the cache for resolved NS records in that delegation. This can lead to degraded     performance and eventually denial of service in orchestrated attacks. Unbound does not suffer from high     CPU usage, but resources are still needed for resolving the malicious delegation. Unbound will keep trying     to resolve the record until hard limits are reached. Based on the nature of the attack and the replies,     different limits could be reached. From version 1.16.3 on, Unbound introduces fixes for better performance     when under load, by cutting opportunistic queries for nameserver discovery and DNSKEY prefetching and     limiting the number of times a delegation point can issue a cache lookup for missing records.
    (CVE-2022-3204)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8062 advisory.

  - NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the ghost domain     names attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue     domain name when the cached delegation information is about to expire. The rogue nameserver delays the     response so that the cached delegation information is expired. Upon receiving the delayed answer     containing the delegation information, Unbound overwrites the now expired entries. This action can be     repeated when the delegation information is about to expire making the rogue delegation information ever-     updating. From version 1.16.2 on, Unbound stores the start time for a query and uses that to decide if the     cached delegation information can be overwritten. (CVE-2022-30699)

  - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the ghost domain     names attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a     subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain     that updates Unbound's delegation cache. This action can be repeated before expiry of the delegation     information by querying Unbound for a second level subdomain which the rogue nameserver provides new     delegation information. Since Unbound is a child-centric resolver, the ever-updating child delegation     information can keep a rogue domain name resolvable long after revocation. From version 1.16.2 on, Unbound     checks the validity of parent delegation records before using cached delegation information.
    (CVE-2022-30698)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the 'ghost domain     names' attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a     subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain     that updates Unbound's delegation cache. This action can be repeated before expiry of the delegation     information by querying Unbound for a second level subdomain which the rogue nameserver provides new     delegation information. Since Unbound is a child-centric resolver, the ever-updating child delegation     information can keep a rogue domain name resolvable long after revocation. From version 1.16.2 on, Unbound     checks the validity of parent delegation records before using cached delegation information.
    (CVE-2022-30698)

  - NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the 'ghost domain     names' attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue     domain name when the cached delegation information is about to expire. The rogue nameserver delays the     response so that the cached delegation information is expired. Upon receiving the delayed answer     containing the delegation information, Unbound overwrites the now expired entries. This action can be     repeated when the delegation information is about to expire making the rogue delegation information ever-     updating. From version 1.16.2 on, Unbound stores the start time for a query and uses that to decide if the     cached delegation information can be overwritten. (CVE-2022-30699)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the 'ghost domain     names' attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a     subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain     that updates Unbound's delegation cache. This action can be repeated before expiry of the delegation     information by querying Unbound for a second level subdomain which the rogue nameserver provides new     delegation information. Since Unbound is a child-centric resolver, the ever-updating child delegation     information can keep a rogue domain name resolvable long after revocation. From version 1.16.2 on, Unbound     checks the validity of parent delegation records before using cached delegation information.
    (CVE-2022-30698)

  - NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the 'ghost domain     names' attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue     domain name when the cached delegation information is about to expire. The rogue nameserver delays the     response so that the cached delegation information is expired. Upon receiving the delayed answer     containing the delegation information, Unbound overwrites the now expired entries. This action can be     repeated when the delegation information is about to expire making the rogue delegation information ever-     updating. From version 1.16.2 on, Unbound stores the start time for a query and uses that to decide if the     cached delegation information can be overwritten. (CVE-2022-30699)

  - A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in     various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a     considerable number of non responsive nameservers. The attack starts by querying a resolver for a record     that relies on those unresponsive nameservers. The attack can cause a resolver to spend a lot of     time/resources resolving records under a malicious delegation point where a considerable number of     unresponsive NS records reside. It can trigger high CPU usage in some resolver implementations that     continually look in the cache for resolved NS records in that delegation. This can lead to degraded     performance and eventually denial of service in orchestrated attacks. Unbound does not suffer from high     CPU usage, but resources are still needed for resolving the malicious delegation. Unbound will keep trying     to resolve the record until hard limits are reached. Based on the nature of the attack and the replies,     different limits could be reached. From version 1.16.3 on, Unbound introduces fixes for better performance     when under load, by cutting opportunistic queries for nameserver discovery and DNSKEY prefetching and     limiting the number of times a delegation point can issue a cache lookup for missing records.
    (CVE-2022-3204)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2023-265 advisory.

  - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the ghost domain     names attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a     subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain     that updates Unbound's delegation cache. This action can be repeated before expiry of the delegation     information by querying Unbound for a second level subdomain which the rogue nameserver provides new     delegation information. Since Unbound is a child-centric resolver, the ever-updating child delegation     information can keep a rogue domain name resolvable long after revocation. From version 1.16.2 on, Unbound     checks the validity of parent delegation records before using cached delegation information.
    (CVE-2022-30698)

  - NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the ghost domain     names attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue     domain name when the cached delegation information is about to expire. The rogue nameserver delays the     response so that the cached delegation information is expired. Upon receiving the delayed answer     containing the delegation information, Unbound overwrites the now expired entries. This action can be     repeated when the delegation information is about to expire making the rogue delegation information ever-     updating. From version 1.16.2 on, Unbound stores the start time for a query and uses that to decide if the     cached delegation information can be overwritten. (CVE-2022-30699)

  - A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in     various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a     considerable number of non responsive nameservers. The attack starts by querying a resolver for a record     that relies on those unresponsive nameservers. The attack can cause a resolver to spend a lot of     time/resources resolving records under a malicious delegation point where a considerable number of     unresponsive NS records reside. It can trigger high CPU usage in some resolver implementations that     continually look in the cache for resolved NS records in that delegation. This can lead to degraded     performance and eventually denial of service in orchestrated attacks. Unbound does not suffer from high     CPU usage, but resources are still needed for resolving the malicious delegation. Unbound will keep trying     to resolve the record until hard limits are reached. Based on the nature of the attack and the replies,     different limits could be reached. From version 1.16.3 on, Unbound introduces fixes for better performance     when under load, by cutting opportunistic queries for nameserver discovery and DNSKEY prefetching and     limiting the number of times a delegation point can issue a cache lookup for missing records.
    (CVE-2022-3204)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7622 advisory.

  - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the ghost domain     names attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a     subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain     that updates Unbound's delegation cache. This action can be repeated before expiry of the delegation     information by querying Unbound for a second level subdomain which the rogue nameserver provides new     delegation information. Since Unbound is a child-centric resolver, the ever-updating child delegation     information can keep a rogue domain name resolvable long after revocation. From version 1.16.2 on, Unbound     checks the validity of parent delegation records before using cached delegation information.
    (CVE-2022-30698)

  - NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the ghost domain     names attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue     domain name when the cached delegation information is about to expire. The rogue nameserver delays the     response so that the cached delegation information is expired. Upon receiving the delayed answer     containing the delegation information, Unbound overwrites the now expired entries. This action can be     repeated when the delegation information is about to expire making the rogue delegation information ever-     updating. From version 1.16.2 on, Unbound stores the start time for a query and uses that to decide if the     cached delegation information can be overwritten. (CVE-2022-30699)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1923-1 advisory.

    unbound was updated to 1.20.0:

    * A lot of bugfixes and added features.
      For a complete list take a look at the changelog located at:
      /usr/share/doc/packages/unbound/Changelog or       https://www.nlnetlabs.nl/projects/unbound/download/

    Some Noteworthy Changes:

    * Removed DLV. The DLV has been decommisioned since unbound       1.5.4 and has been advised to stop using it since. The use of       dlv options displays a warning.
    * Remove EDNS lame procedure, do not re-query without EDNS after       timeout.
    * Add DNS over HTTPS
    * libunbound has been upgraded to major version 8

    Security Fixes:
    * CVE-2023-50387: DNSSEC verification complexity can be       exploited to exhaust CPU resources and stall DNS resolvers.  [bsc#1219823]
    * CVE-2023-50868: NSEC3 closest encloser proof can exhaust CPU.
      [bsc#1219826]
    * CVE-2022-30698: Novel 'ghost domain names' attack by       introducing subdomain delegations.  [bsc#1202033]
    * CVE-2022-30699: Novel 'ghost domain names' attack by       updating almost expired delegation information.  [bsc#1202031]
    * CVE-2022-3204: NRDelegation attack leads to uncontrolled       resource consumption (Non-Responsive Delegation Attack).  [bsc#1203643]

    Packaging Changes:

    * Use prefixes instead of sudo in unbound.service
    * Remove no longer necessary BuildRequires: libfstrm-devel and       libprotobuf-c-devel

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
167084	RHEL 8：unbound (RHSA-2022: 7622)	Nessus	Red Hat Local Security Checks	2022/11/8	2024/4/28	critical
173079	Amazon Linux 2023：python3-unbound、unbound、unbound-anchor (ALAS2023-2023-078)	Nessus	Amazon Linux Local Security Checks	2023/3/21	2023/3/21	medium
190712	Amazon Linux 2：unbound (ALAS-2024-2468)	Nessus	Amazon Linux Local Security Checks	2024/2/19	2024/2/19	medium
166839	EulerOS 2.0 SP10 : unbound (EulerOS-SA-2022-2670)	Nessus	Huawei Local Security Checks	2022/11/2	2022/11/28	medium
166847	EulerOS 2.0 SP10 : unbound (EulerOS-SA-2022-2702)	Nessus	Huawei Local Security Checks	2022/11/2	2022/11/28	medium
167096	CentOS 8 : unbound (CESA-2022:7622)	Nessus	CentOS Local Security Checks	2022/11/8	2022/11/24	medium
167316	AlmaLinux 8 : unbound (ALSA-2022:7622)	Nessus	Alma Linux Local Security Checks	2022/11/12	2022/11/24	medium
167386	EulerOS 2.0 SP9 : unbound (EulerOS-SA-2022-2781)	Nessus	Huawei Local Security Checks	2022/11/14	2022/11/24	medium
168105	Oracle Linux 9 : unbound (ELSA-2022-8062)	Nessus	Oracle Linux Local Security Checks	2022/11/22	2022/11/24	medium
169380	EulerOS Virtualization 2.10.1 : unbound (EulerOS-SA-2022-2948)	Nessus	Huawei Local Security Checks	2022/12/28	2022/12/28	medium
169983	EulerOS Virtualization 2.9.0 : unbound (EulerOS-SA-2023-1236)	Nessus	Huawei Local Security Checks	2023/1/12	2023/1/12	medium
170611	Amazon Linux 2022 : (ALAS2022-2023-265)	Nessus	Amazon Linux Local Security Checks	2023/1/25	2023/1/25	medium
177202	EulerOS Virtualization 3.0.6.0 : unbound (EulerOS-SA-2023-2215)	Nessus	Huawei Local Security Checks	2023/6/13	2023/6/13	medium
184714	Rocky Linux 8 : unbound (RLSA-2022:7622)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	medium
200108	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : unbound (SUSE-SU-2024:1923-1)	Nessus	SuSE Local Security Checks	2024/6/5	2024/6/5	medium

偵測

搜尋 Plugin

critical

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium