The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-16df491a66 advisory.

    # Update to 1.24.1

    - Enables DNS over QUIC server in unbound
    - Fix [CVE-2025-11411](https://nlnetlabs.nl/downloads/unbound/CVE-2025-11411.txt), (possible domain     hijacking attack), reported by Yuxiao Wu, Yunyi Zhang, Baojun Liu and Haixin Duan from Tsinghua     University.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4365 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4365-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     November 05, 2025                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : unbound     Version        : 1.13.1-1+deb11u6     CVE ID         : CVE-2025-11411

    Yuxiao Wu, Yunyi Zhang, Baojun Liu and Haixin Duan discovered that     unbound, a validating, recursive, and caching DNS resolver, was     vulnerable to cache poisoning via NS RRSet injection, which could lead     to domain hijack.

    Promiscuous NS RRSets that complement DNS replies in the authority     section can be used to trick resolvers to update their delegation     information for the zone.  Usually these RRSets are used to update the     resolver's knowledge of the zone's name servers.  A malicious actor who     is able to attach such records in a reply (i.e., spoofed packet,     fragmentation attack) can poison Unbound's cache for the delegation     point.

    The fix scrubs unsolicited NS RRSets (and their respective address     records) from replies, thereby mitigating the possible poison effect.
    The protection can be turned off by setting the new configuration option     iter-scrub-promiscuous to no, see unbound.conf(5).

    For Debian 11 bullseye, this problem has been fixed in version     1.13.1-1+deb11u6.

    We recommend that you upgrade your unbound packages.

    For the detailed security status of unbound please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/unbound

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4134-1 advisory.

    - CVE-2025-11411: Fixed possible domain hijacking attack. (bsc#1252525)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6071 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6071-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     December 04, 2025                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : unbound     CVE ID         : CVE-2025-11411

    It was discovered that incorrect handling of promiscuous NS RRSets in     Unbound, a validating, recursive, caching DNS resolver, could result in     cache poisoning.

    For the stable distribution (trixie), this problem has been fixed in     version 1.22.0-2+deb13u1.

    We recommend that you upgrade your unbound packages.

    For the detailed security status of unbound please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/unbound

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1315 advisory.

    NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks.
    Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick     resolvers to update their delegation information for the zone. Usually these RRSets are used to update the     resolver's knowledge of the zone's name servers. A malicious actor can exploit the possible poisonous     effect by injecting NS RRSets (and possibly their respective address records) in a reply. This could be     done for example by trying to spoof a packet or fragmentation attacks. Unbound would then proceed to     update the NS RRSet data it already has since the new data has enough trust for it, i.e., in-zone data for     the delegation point. Unbound 1.24.1 includes a fix that scrubs unsolicited NS RRSets (and their     respective address records) from replies mitigating the possible poison effect. (CVE-2025-11411)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks.
    Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick     resolvers to update their delegation information for the zone. Usually these RRSets are used to update the     resolver's knowledge of the zone's name servers. A malicious actor can exploit the possible poisonous     effect by injecting NS RRSets (and possibly their respective address records) in a reply. This could be     done for example by trying to spoof a packet or fragmentation attacks. Unbound would then proceed to     update the NS RRSet data it already has since the new data has enough trust for it, i.e., in-zone data for     the delegation point. Unbound 1.24.1 includes a fix that scrubs unsolicited NS RRSets (and their     respective address records) from replies mitigating the possible poison effect.(CVE-2025-11411)

Tenable has extracted the preceding description block directly from the EulerOS unbound security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:20201-1 advisory.

    Update to 1.24.1:

    - CVE-2025-11411: Fixed possible domain hijacking attack (bsc#1252525).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-93d7b9a5d5 advisory.

    Fix [CVE-2025-11411](https://www.cve.org/CVERecord?id=CVE-2025-11411) (possible domain hijacking attack),     reported by Yuxiao Wu, Yunyi Zhang, Baojun Liu and Haixin Duan from Tsinghua University.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7855-1 advisory.

    Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Unbound incorrectly handled certain     promiscuous NS RRSets. A remote attacker could possibly use this issue to perform a domain hijack attack.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of unbound installed on the remote host is prior to 1.17.0-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2UNBOUND-1.17-2025-006 advisory.

    NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks.
    Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick     resolvers to update their delegation information for the zone. Usually these RRSets are used to update the     resolver's knowledge of the zone's name servers. A malicious actor can exploit the possible poisonous     effect by injecting NS RRSets (and possibly their respective address records) in a reply. This could be     done for example by trying to spoof a packet or fragmentation attacks. Unbound would then proceed to     update the NS RRSet data it already has since the new data has enough trust for it, i.e., in-zone data for     the delegation point. Unbound 1.24.1 includes a fix that scrubs unsolicited NS RRSets (and their     respective address records) from replies mitigating the possible poison effect. (CVE-2025-11411)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-90281e4554 advisory.

    # Update to 1.24.2 (rhbz#2417261)

    - Additional fix for CVE-2025-11411

    https://nlnetlabs.nl/projects/unbound/download/#unbound-1-24-2

    ----

    Do not always initialize QUIC library, even if not usage of QUIC is configured.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks.
    Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick     resolvers to update their delegation information for the zone. Usually these RRSets are used to update the     resolver's knowledge of the zone's name servers. A malicious actor can exploit the possible poisonous     effect by injecting NS RRSets (and possibly their respective address records) in a reply. This could be     done for example by trying to spoof a packet or fragmentation attacks. Unbound would then proceed to     update the NS RRSet data it already has since the new data has enough trust for it, i.e., in-zone data for     the delegation point. Unbound 1.24.1 includes a fix that scrubs unsolicited NS RRSets (and their     respective address records) from replies mitigating the possible poison effect. Unbound 1.24.2 includes an     additional fix that scrubs unsolicited NS RRSets (and their respective address records) from YXDOMAIN and     non-referral nodata replies, further mitigating the possible poison effect.(CVE-2025-11411)

Tenable has extracted the preceding description block directly from the EulerOS unbound security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks.
    Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick     resolvers to update their delegation information for the zone. Usually these RRSets are used to update the     resolver's knowledge of the zone's name servers. A malicious actor can exploit the possible poisonous     effect by injecting NS RRSets (and possibly their respective address records) in a reply. This could be     done for example by trying to spoof a packet or fragmentation attacks. Unbound would then proceed to     update the NS RRSet data it already has since the new data has enough trust for it, i.e., in-zone data for     the delegation point. Unbound 1.24.1 includes a fix that scrubs unsolicited NS RRSets (and their     respective address records) from replies mitigating the possible poison effect.(CVE-2025-11411)

    A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching     resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS     support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to upstream     name servers, i.e., at least one of the 'send-client-subnet', 'client-subnet-zone' or 'client-subnet-     always-forward' options is used. Resolvers supporting ECS need to segregate outgoing queries to     accommodate for different outgoing ECS information. This re-opens up resolvers to a birthday paradox     attack (Rebirthday Attack) that tries to match the DNS transaction ID in order to cache non-ECS poisonous     replies.(CVE-2025-5994)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization unbound security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks.
    Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick     resolvers to update their delegation information for the zone. Usually these RRSets are used to update the     resolver's knowledge of the zone's name servers. A malicious actor can exploit the possible poisonous     effect by injecting NS RRSets (and possibly their respective address records) in a reply. This could be     done for example by trying to spoof a packet or fragmentation attacks. Unbound would then proceed to     update the NS RRSet data it already has since the new data has enough trust for it, i.e., in-zone data for     the delegation point. Unbound 1.24.1 includes a fix that scrubs unsolicited NS RRSets (and their     respective address records) from replies mitigating the possible poison effect.(CVE-2025-11411)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization unbound security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007095 advisory.

    NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks.
    Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick     resolvers to update their delegation information for the zone. Usually these RRSets are used to update the     resolver's knowledge of the zone's name servers. A malicious actor can exploit the possible poisonous     effect by injecting NS RRSets (and possibly their respective address records) in a reply. This could be     done for example by trying to spoof a packet or fragmentation attacks. Unbound would then proceed to     update the NS RRSet data it already has since the new data has enough trust for it, i.e., in-zone data for     the delegation point. Unbound 1.24.1 includes a fix that scrubs unsolicited NS RRSets (and their     respective address records) from replies mitigating the possible poison effect. Unbound 1.24.2 includes an     additional fix that scrubs unsolicited NS RRSets (and their respective address records) from YXDOMAIN and     non-referral nodata replies, further mitigating the possible poison effect.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
272136	Fedora 43 : unbound (2025-16df491a66)	Nessus	Fedora Local Security Checks	2025/11/1	2025/11/1	high
274071	Debian dla-4365 : libunbound-dev - security update	Nessus	Debian Local Security Checks	2025/11/5	2025/11/5	high
275758	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : unbound (SUSE-SU-2025:4134-1)	Nessus	SuSE Local Security Checks	2025/11/19	2026/3/12	high
277500	Debian dsa-6071 : libunbound-dev - security update	Nessus	Debian Local Security Checks	2025/12/4	2026/2/26	high
277811	Amazon Linux 2023 : python3-unbound, unbound, unbound-anchor (ALAS2023-2025-1315)	Nessus	Amazon Linux Local Security Checks	2025/12/9	2026/2/26	high
284756	EulerOS 2.0 SP10 : unbound (EulerOS-SA-2026-1060)	Nessus	Huawei Local Security Checks	2026/1/15	2026/2/12	high
297836	SUSE SLES16 Security Update : unbound (SUSE-SU-2026:20201-1)	Nessus	SuSE Local Security Checks	2026/2/4	2026/2/5	high
271787	Fedora 42 : unbound (2025-93d7b9a5d5)	Nessus	Fedora Local Security Checks	2025/10/28	2025/10/28	high
272305	Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : Unbound vulnerability (USN-7855-1)	Nessus	Ubuntu Local Security Checks	2025/11/5	2025/11/5	high
274073	Amazon Linux 2 : unbound, --advisory ALAS2UNBOUND-1.17-2025-006 (ALASUNBOUND-1.17-2025-006)	Nessus	Amazon Linux Local Security Checks	2025/11/5	2025/11/5	high
277222	Fedora 43 : unbound (2025-90281e4554)	Nessus	Fedora Local Security Checks	2025/12/3	2026/2/27	high
284734	EulerOS 2.0 SP12 : unbound (EulerOS-SA-2026-1080)	Nessus	Huawei Local Security Checks	2026/1/15	2026/2/12	high
297380	EulerOS Virtualization 2.10.1 : unbound (EulerOS-SA-2026-1149)	Nessus	Huawei Local Security Checks	2026/1/31	2026/1/31	high
302973	EulerOS Virtualization 2.13.0 : unbound (EulerOS-SA-2026-1632)	Nessus	Huawei Local Security Checks	2026/3/18	2026/3/20	high
305931	Unity Linux 20.1070e Security Update: unbound (UTSA-2026-007095)	Nessus	Unity Linux Local Security Checks	2026/4/10	2026/4/13	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high