Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 攻擊者可傳送 web 要求在內部 web 伺服器中造成無限制的記憶體配置進而導致拒絕服務。內部 Web 伺服器預設為停用狀態。 (CVE-2026-33260)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 攻击者可发送可在内部 Web 服务器中造成无限内存分配的 Web 请求进而导致拒绝服务。内部 Web 服务器默认禁用。 (CVE-2026-33260)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 攻撃者が、内部 Web サーバーで無制限のメモリ割り当てを引き起こす Web リクエストを送信し、サービス拒否を引き起こす可能性があります。内部 Web サーバーは、デフォルトでは無効になっています。CVE-2026-33260

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6233 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6233-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     April 28, 2026                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : pdns     CVE ID         : CVE-2026-33257 CVE-2026-33260 CVE-2026-33608                      CVE-2026-33609 CVE-2026-33610 CVE-2026-33611

    Multiple security vulnerabilities were discovered in the dnsdist DNS     loadbalancer, which could result in denial of service, information     disclosure or ACL bypass.

    For the stable distribution (trixie), these problems have been fixed in     version 4.9.14-0+deb13u1.

    We recommend that you upgrade your pdns packages.

    For the detailed security status of pdns please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/pdns

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An attacker can send a web request that causes unlimited memory allocation in the internal web server,     leading to a denial of service. The internal web server is disabled by default. (CVE-2026-33260)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6234 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6234-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     April 28, 2026                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : pdns-recursor     CVE ID         : CVE-2026-33257 CVE-2026-33258 CVE-2026-33259                      CVE-2026-33260 CVE-2026-33261 CVE-2026-33600                      CVE-2026-33601

    Multiple vulnerabiliites have been discovered in PDNS Recursor, a     resolving name server, which could result in denial of service.

    For the stable distribution (trixie), these problems have been fixed in     version 5.2.9-0+deb13u1.

    We recommend that you upgrade your pdns-recursor packages.

    For the detailed security status of pdns-recursor please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/pdns-recursor

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6235 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6235-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     April 28, 2026                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : dnsdist     CVE ID         : CVE-2026-0396  CVE-2026-0397  CVE-2026-24028                      CVE-2026-24029 CVE-2026-24030 CVE-2026-27853                      CVE-2026-27854 CVE-2026-33254 CVE-2026-33257                      CVE-2026-33260 CVE-2026-33593 CVE-2026-33594                      CVE-2026-33595 CVE-2026-33596 CVE-2026-33597                      CVE-2026-33598 CVE-2026-33599 CVE-2026-33602

    Multiple security vulnerabilities were discovered in the dnsdist     DNS loadbalancer, which could result in denial of service, information     disclosure or ACL bypass.

    For the stable distribution (trixie), these problems have been fixed in     version 1.9.14-0+deb13u1.

    We recommend that you upgrade your dnsdist packages.

    For the detailed security status of dnsdist please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/dnsdist

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
309726	Linux Distros 未修補的弱點：CVE-2026-33260	Nessus	Misc.	2026/4/22	2026/4/29	high
309726	Linux Distros 未修补的漏洞：CVE-2026-33260	Nessus	Misc.	2026/4/22	2026/4/29	high
309726	Linux Distros のパッチ未適用の脆弱性: CVE-2026-33260	Nessus	Misc.	2026/4/22	2026/4/29	high
310796	Debian dsa-6233 : pdns-backend-bind - security update	Nessus	Debian Local Security Checks	2026/4/29	2026/4/29	critical
309726	Linux Distros Unpatched Vulnerability : CVE-2026-33260	Nessus	Misc.	2026/4/22	2026/4/29	high
310795	Debian dsa-6234 : pdns-recursor - security update	Nessus	Debian Local Security Checks	2026/4/29	2026/4/29	high
310797	Debian dsa-6235 : dnsdist - security update	Nessus	Debian Local Security Checks	2026/4/29	2026/4/29	critical

检测

插件搜索

high

high

high

critical

high

high

critical