An update of the unbound package has been released.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1369 advisory.

    This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 9.6. It addresses 28 CVEs:
    CVE-2026-42534, CVE-2026-32792, CVE-2011-4528, CVE-2014-8602, CVE-2025-11411, and 23 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1371 advisory.

    This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 9.2. It addresses 16 CVEs:
    CVE-2026-42534, CVE-2026-32792, CVE-2025-11411, CVE-2026-42960, CVE-2026-41292, and 11 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1370 advisory.

    This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 9.4. It addresses 15 CVEs:
    CVE-2026-42534, CVE-2026-32792, CVE-2025-11411, CVE-2026-42960, CVE-2026-41292, and 10 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0020 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-1488:
    A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside     the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to     port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to     manipulate a running instance, potentially altering forwarders, allowing them to track all queries     forwarded by the local resolver, and, in some cases, disrupting resolving altogether.

    CVE-2024-8508:
    NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with     very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very     large RRsets can cause Unbound to spend a considerable time applying name compression to downstream     replies. This can lead to degraded performance and eventually denial of service in well orchestrated     attacks. The vulnerability can be exploited by a malicious actor querying Unbound for the specially     crafted contents of a malicious zone with very large RRsets. Before Unbound replies to the query it will     try to apply name compression which was an unbounded operation that could lock the CPU until the whole     packet was complete. Unbound version 1.21.1 introduces a hard limit on the number of name compression     calculations it is willing to do per packet. Packets that need more compression will result in semi-     compressed packets or truncated packets, even on TCP for huge messages, to avoid locking the CPU for long.
    This change should not affect normal DNS traffic.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
209809	Photon OS 4.0: Unbound PHSA-2024-4.0-0707	Nessus	PhotonOS Local Security Checks	2024/10/27	2026/11/2	medium
354372	Rocky Linux 9.6 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (ciqsa-2026_1369)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
355046	Rocky Linux 9.2 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (ciqsa-2026_1371)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
356028	Rocky Linux 9.4 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (ciqsa-2026_1370)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
235973	Alibaba Cloud Linux 3 : 0020: unbound (ALINUX3-SA-2025:0020)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high

检测

插件搜索

medium

high

high

high

high