The version of bind installed on the remote host is prior to 9.18.33 / 9.20.5. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-029-01 advisory.

    New bind packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the bind security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-838 advisory.

    It is possible to construct a zone such that some queries to it will generate responses containing     numerous records in the Additional section. An attacker sending many such queries can cause either the     authoritative server itself or an independent resolver to use disproportionate resources processing the     queries. Zones will usually need to have been deliberately crafted to attack this exposure.This issue     affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0     through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and     9.18.11-S1 through 9.18.32-S1. (CVE-2024-11187)

    Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with     crafted valid or invalid HTTP/2 traffic.This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0     through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1. (CVE-2024-12705)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with     crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0     through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1. (CVE-2024-12705)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0355-1 advisory.

    Update to release 9.18.33

    Security Fixes:

    - CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section (bsc#1236596)
    - CVE-2024-12705: Fixes multiple issues in DNS-over-HTTPS implementation when under heavy query load     (bsc#1236597)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-1670 advisory.

    - Fix CVE-2024-11187 bind: bind9: Many records in the additional section cause CPU exhaustion

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:1670 advisory.

    * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)
      * bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load     (CVE-2024-12705)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1800 advisory.

    This advisory aggregates security fixes for the bind9.18 SRPM in CIQ LTS 9.6. It addresses 34 CVEs:
    CVE-2009-0696, CVE-2018-5738, CVE-2016-1286, CVE-2006-4095, CVE-2007-2926, and 29 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the bindutils package has been released.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_1670 advisory.

    * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

    * bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load     (CVE-2024-12705)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5854 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5854-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     January 29, 2025                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : bind9     CVE ID         : CVE-2024-11187 CVE-2024-12705

    Several vulnerabilities were discovered in BIND, a DNS server     implementation, which may result in denial of service.

    For the stable distribution (bookworm), these problems have been fixed in     version 1:9.18.33-1~deb12u2.

    We recommend that you upgrade your bind9 packages.

    For the detailed security status of bind9 please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/bind9

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2751 advisory.

    It is possible to construct a zone such that some queries to it will generate responses containing     numerous records in the Additional section. An attacker sending many such queries can cause either the     authoritative server itself or an independent resolver to use disproportionate resources processing the     queries. Zones will usually need to have been deliberately crafted to attack this exposure.This issue     affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0     through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and     9.18.11-S1 through 9.18.32-S1. (CVE-2024-11187)

    Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with     crafted valid or invalid HTTP/2 traffic.This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0     through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1. (CVE-2024-12705)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:1670 advisory.

    BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND     includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for     applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating     properly.

    Security Fix(es):

    * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

    * bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load     (CVE-2024-12705)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
214786	Slackware Linux 15.0 / current bind Multiple Vulnerabilities (SSA:2025-029-01)	Nessus	Slackware Local Security Checks	2025/1/29	2025/5/22	high
215038	Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2025-838)	Nessus	Amazon Linux Local Security Checks	2025/2/5	2025/5/22	high
227699	Linux Distros Unpatched Vulnerability : CVE-2024-12705	Nessus	Misc.	2025/3/5	2026/7/25	high
215184	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : bind (SUSE-SU-2025:0355-1)	Nessus	SuSE Local Security Checks	2025/2/10	2025/5/22	high
216615	Oracle Linux 9 : bind9.18 (ELSA-2025-1670)	Nessus	Oracle Linux Local Security Checks	2025/2/21	2025/9/11	high
216687	AlmaLinux 9 : bind9.18 (ALSA-2025:1670)	Nessus	Alma Linux Local Security Checks	2025/2/24	2025/2/24	high
381080	Rocky Linux 9.6 [CIQ] Security Update: bind9.18 / bind9.18-chroot / bind9.18-devel / bind9.18-dnssec-utils / etc Multiple Vulnerabilities (ciqsa-2026_1800)	Nessus	Rocky Linux Local Security Checks	2026/11/14	2026/11/14	high
235140	Photon OS 5.0: Bindutils PHSA-2025-5.0-0511	Nessus	PhotonOS Local Security Checks	2025/5/5	2026/10/14	high
357757	Rocky Linux 9 [CIQ] Security Update: bind9.18 / bind9.18-chroot / bind9.18-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_1670)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
214787	Debian dsa-5854 : bind9 - security update	Nessus	Debian Local Security Checks	2025/1/29	2025/5/22	high
214980	Amazon Linux 2 : bind (ALAS-2025-2751)	Nessus	Amazon Linux Local Security Checks	2025/2/4	2025/5/22	high
216489	RHEL 9 : bind9.18 (RHSA-2025:1670)	Nessus	Red Hat Local Security Checks	2025/2/19	2025/6/5	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high

high