The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7557:02 advisory.

    * bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
      * bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1804 advisory.

    The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

    Security Fix(es):

    * bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)

    * bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

    Security Fix(es):

    * A vulnerability was found in Unbound due to incorrect default permissions,     allowing any process outside the unbound group to modify the unbound runtime     configuration. The default combination of the control-use-cert: no option with     either explicit or implicit use of an IP address in the control-interface     option could allow improper access. If a process can connect over localhost to     port 8953, it can alter the configuration of unbound.service. This flaw allows     an unprivileged local process to manipulate a running instance, potentially     altering forwarders, allowing them to track all queries forwarded by the local     resolver, and, in some cases, disrupting resolving altogether.

    To mitigate the vulnerability, a new file     /etc/unbound/conf.d/remote-control.conf has been added and included in the     main unbound configuration file, unbound.conf. The file contains two     directives that should limit access to unbound.conf:

        control-interface: /run/unbound/control         control-use-cert: yes

    For details about these directives, run man unbound.conf.

    Updating to the version of unbound provided by this advisory should, in most     cases, address the vulnerability. To verify that your configuration is not     vulnerable, use the unbound-control status | grep control command. If the     output contains control(ssl) or control(namedpipe), your configuration is     not vulnerable. If the command output returns only control, the configuration     is vulnerable because it does not enforce access only to the unbound group     members. To fix your configuration, add the line include:
    /etc/unbound/conf.d/remote-control.conf to the end of the file     /etc/unbound/unbound.conf. If you use a custom     /etc/unbound/conf.d/remote-control.conf file, add the new directives to this     file. (CVE-2024-1488)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s)     listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5034830. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2024-21350,     CVE-2024-21352, CVE-2024-21358, CVE-2024-21359, CVE-2024-21360, CVE-2024-21361, CVE-2024-21365,     CVE-2024-21366, CVE-2024-21367, CVE-2024-21368, CVE-2024-21369, CVE-2024-21370, CVE-2024-21375,     CVE-2024-21391, CVE-2024-21420)

  - Windows Kernel Information Disclosure Vulnerability (CVE-2024-21340)

  - Microsoft ActiveX Data Objects Remote Code Execution Vulnerability (CVE-2024-21349)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5034809. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2024-21350,     CVE-2024-21352, CVE-2024-21358, CVE-2024-21359, CVE-2024-21360, CVE-2024-21361, CVE-2024-21365,     CVE-2024-21366, CVE-2024-21367, CVE-2024-21368, CVE-2024-21369, CVE-2024-21370, CVE-2024-21375,     CVE-2024-21391, CVE-2024-21420)

  - Windows Kernel Information Disclosure Vulnerability (CVE-2024-21340)

  - Microsoft ActiveX Data Objects Remote Code Execution Vulnerability (CVE-2024-21349)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the dnsmasq package has been released.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.101026 advisory.

  - A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in     ntfs_get_attribute_value, in NTFS-3G < 2021.8.22. (CVE-2021-39263)

  - EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers     option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain     unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
    (CVE-2023-45234)

  - Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote     attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the     KeyTrap issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the     protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG     records. (CVE-2023-50387)

  - The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped)     allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC     responses in a random subdomain attack, aka the NSEC3 issue. The RFC 5155 specification implies that an     algorithm must perform thousands of iterations of a hash function in certain situations. (CVE-2023-50868)

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5034768. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2024-21350,     CVE-2024-21352, CVE-2024-21358, CVE-2024-21359, CVE-2024-21360, CVE-2024-21361, CVE-2024-21365,     CVE-2024-21366, CVE-2024-21367, CVE-2024-21368, CVE-2024-21369, CVE-2024-21370, CVE-2024-21375,     CVE-2024-21391, CVE-2024-21420)

  - Windows Kernel Elevation of Privilege Vulnerability (CVE-2024-21338, CVE-2024-21371)

  - Windows Kernel Information Disclosure Vulnerability (CVE-2024-21340)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
293173	MiracleLinux 9 : unbound-1.16.2-3.el9_3.1 (AXSA:2024-7557:02)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
193318	RHEL 8 : unbound (RHSA-2024:1804)	Nessus	Red Hat Local Security Checks	2024/4/15	2025/12/24	high
190479	KB5034830: Windows Server 2012 Security Update (February 2024)	Nessus	Windows : Microsoft Bulletins	2024/2/13	2024/6/17	high
190478	KB5034809: Windows Server 2008 R2 Security Update (February 2024)	Nessus	Windows : Microsoft Bulletins	2024/2/13	2024/9/24	high
319598	Photon OS 5.0: Dnsmasq PHSA-2026-5.0-0866	Nessus	PhotonOS Local Security Checks	2026/6/6	2026/7/22	high
206824	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.101026)	Nessus	Misc.	2024/9/9	2025/10/6	medium
190482	KB5034768: Windows 10 version 1809 / Windows Server 2019 Security Update (February 2024)	Nessus	Windows : Microsoft Bulletins	2024/2/13	2025/10/9	high

检测

插件搜索

high

high

high

high

high

medium

high