There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - By design, BIND is intended to limit the number of TCP clients that can be connected at any given time.
    The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value
    for most servers. Unfortunately, the code which was intended to limit the number of simultaneous
    connections contained an error which could be exploited to grow the number of simultaneous connections
    beyond this limit. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0.
    BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7
    of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for
    vulnerability to CVE-2018-5743. (CVE-2018-5743)

  - A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the
    alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most
    likely scenario where this might occur is if the server, in addition to performing NXDOMAIN redirection
    for recursive clients, is also serving a local copy of the root zone or using mirroring to provide the
    root zone, although other configurations are also possible. Versions affected: BIND 9.12.0-> 9.12.4,
    9.14.0. Also affects all releases in the 9.13 development branch. (CVE-2019-6467)

ISC BIND 9.12.4-P1 之前的 9.12.x 版，或 9.14.1 之前的 9.13.x 版在 query.c 的 nxdomain-redirect 功能中，受到一個 DoS 弱點影響。未經驗證的遠端攻擊者可惡意利用此問題，造成應用程式停止回應。

ISC BIND 9.12.4-P1 之前的 9.12.x 版，或 9.14.1 之前的 9.13.x 版在 query.c 的 nxdomain-redirect 功能中，受到一个 DoS 漏洞影响。未经身份验证的远程攻击者可利用此问题造成应用程序停止响应。

9.12.4-P1より前の9.12.x、または9.14.1より前の9.13.xのバージョンのISC BINDは、query.cのnxdomain-redirect機能のDoS脆弱性の影響を受けます。認証されていないリモートの攻撃者がこれを悪用し、アプリケーションの応答を停止させる可能性があります。

According to the versions of the bind packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - A programming error in the nxdomain-redirect feature     can cause an assertion failure in query.c if the     alternate namespace used by nxdomain-redirect is a     descendant of a zone that is served locally. The most     likely scenario where this might occur is if the     server, in addition to performing NXDOMAIN redirection     for recursive clients, is also serving a local copy of     the root zone or using mirroring to provide the root     zone, although other configurations are also possible.
    Versions affected: BIND 9.12.0-> 9.12.4, 9.14.0. Also     affects all releases in the 9.13 development     branch.(CVE-2019-6467)

  - With pipelining enabled each incoming query on a TCP     connection requires a similar resource allocation to a     query received via UDP or via TCP without pipelining     enabled. A client using a TCP-pipelined connection to a     server could consume more resources than the server has     been provisioned to handle. When a TCP connection with     a large number of pipelined queries is closed, the load     on the server releasing these multiple resources can     cause it to become unresponsive, even for queries that     can be answered authoritatively or from cache. (This is     most likely to be perceived as an intermittent server     problem).(CVE-2019-6477)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - With pipelining enabled each incoming query on a TCP     connection requires a similar resource allocation to a     query received via UDP or via TCP without pipelining     enabled. A client using a TCP-pipelined connection to a     server could consume more resources than the server has     been provisioned to handle. When a TCP connection with     a large number of pipelined queries is closed, the load     on the server releasing these multiple resources can     cause it to become unresponsive, even for queries that     can be answered authoritatively or from cache. (This is     most likely to be perceived as an intermittent server     problem).(CVE-2019-6477)

  - A programming error in the nxdomain-redirect feature     can cause an assertion failure in query.c if the     alternate namespace used by nxdomain-redirect is a     descendant of a zone that is served locally. The most     likely scenario where this might occur is if the     server, in addition to performing NXDOMAIN redirection     for recursive clients, is also serving a local copy of     the root zone or using mirroring to provide the root     zone, although other configurations are also possible.
    Versions affected: BIND 9.12.0-> 9.12.4, 9.14.0. Also     affects all releases in the 9.13 development     branch.(CVE-2019-6467)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ISC BIND versions 9.12.x prior to 9.12.4-P1, or 9.13.x prior to 9.14.1 are affected by a DoS vulnerability in the nxdomain-redirect feature in the query.c. An unauthenticated, remote attacker can exploit this issue, to cause the application to stop responding.

An update of the bindutils package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
423697	Alpine: multiple bind packages: security update to 9.14.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
403645	Alpine: bind: security update to 9.11.6_p1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
403651	Alpine: bind: security update to 9.12.4_p1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
403651	Alpine: bind: security update to 9.12.4_p1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
423697	Alpine: multiple bind packages: security update to 9.14.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
403645	Alpine: bind: security update to 9.11.6_p1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
124588	ISC BIND 9.12.x < 9.12.4-P1、9.13.x < 9.14.1 拒絕服務弱點	Nessus	DNS	2019/5/3	2020/5/22	high
124588	ISC BIND 9.12.x < 9.12.4-P1、9.13.x < 9.14.1 拒绝服务漏洞	Nessus	DNS	2019/5/3	2020/5/22	high
124588	ISC BIND 9.12.x <9.12.4-P1、9.13.x <9.14.1のサービス拒否の脆弱性	Nessus	DNS	2019/5/3	2020/5/22	high
135142	EulerOS Virtualization for ARM 64 3.0.6.0 : bind (EulerOS-SA-2020-1355)	Nessus	Huawei Local Security Checks	2020/4/2	2024/3/20	high
133975	EulerOS 2.0 SP8 : bind (EulerOS-SA-2020-1141)	Nessus	Huawei Local Security Checks	2020/2/25	2024/3/26	high
124588	ISC BIND 9.12.x < 9.12.4-P1, 9.13.x < 9.14.1 Denial of Service Vulnerability	Nessus	DNS	2019/5/3	2020/5/22	high
203761	Photon OS 3.0: Bindutils PHSA-2020-3.0-0049	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	medium
132987	Photon OS 2.0: Bindutils PHSA-2020-2.0-0199	Nessus	PhotonOS Local Security Checks	2020/1/16	2024/7/23	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

medium

high