Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 用戶端可透過單一 DoQ 和 DoH3 連線產生大量錯誤回應來觸發記憶體過度配置因為有些資源直到連線結束才會正確釋放。
    (CVE-2026-33595)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 客户端可通过在单个 DoQ 和 DoH3 连接上生成大量错误响应触发内存分配过度这是因为某些资源在连接结束时才会正确释放。
    (CVE-2026-33595)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 一部のリソースが接続の終わりまで適切に解放されなかったため、クライアントは、単一の DoQ および DoH3 接続で多数のエラー応答を生成することで、過剰なメモリ割り当てを発生させる可能性があります。
    (CVE-2026-33595)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ     and DoH3 connection, as some resources were not properly released until the end of the connection.
    (CVE-2026-33595)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6235 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6235-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     April 28, 2026                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : dnsdist     CVE ID         : CVE-2026-0396  CVE-2026-0397  CVE-2026-24028                      CVE-2026-24029 CVE-2026-24030 CVE-2026-27853                      CVE-2026-27854 CVE-2026-33254 CVE-2026-33257                      CVE-2026-33260 CVE-2026-33593 CVE-2026-33594                      CVE-2026-33595 CVE-2026-33596 CVE-2026-33597                      CVE-2026-33598 CVE-2026-33599 CVE-2026-33602

    Multiple security vulnerabilities were discovered in the dnsdist     DNS loadbalancer, which could result in denial of service, information     disclosure or ACL bypass.

    For the stable distribution (trixie), these problems have been fixed in     version 1.9.14-0+deb13u1.

    We recommend that you upgrade your dnsdist packages.

    For the detailed security status of dnsdist please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/dnsdist

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
309714	Linux Distros 未修補的弱點：CVE-2026-33595	Nessus	Misc.	2026/4/22	2026/4/29	high
309714	Linux Distros 未修补的漏洞：CVE-2026-33595	Nessus	Misc.	2026/4/22	2026/4/29	high
309714	Linux Distros のパッチ未適用の脆弱性: CVE-2026-33595	Nessus	Misc.	2026/4/22	2026/4/29	high
309714	Linux Distros Unpatched Vulnerability : CVE-2026-33595	Nessus	Misc.	2026/4/22	2026/4/29	high
310797	Debian dsa-6235 : dnsdist - security update	Nessus	Debian Local Security Checks	2026/4/29	2026/4/29	critical

检测

插件搜索

high

high

high

high

critical