The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0854 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-8677:
    Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead     to CPU exhaustion.
    This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12,     9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

    CVE-2025-40780:
    In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it     is possible for an attacker to predict the source port and query ID that BIND will use.
    This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13,     9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through     9.20.13-S1.

    CVE-2025-40778:
    Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker     to inject forged data into the cache.
    This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13,     9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through     9.20.13-S1.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21939 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    Security Fix(es):

    * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

    * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:21034 advisory.

    * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
      * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
      * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-21110 advisory.

    - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
    - Address various spoofing attacks (CVE-2025-40778)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20039-1 advisory.

    - Upgrade to release 9.20.15       Security Fixes:
      * CVE-2025-40778: Fixed cache poisoning attacks with unsolicited RRs (bsc#1252379)
      * CVE-2025-40780: Fixed cache poisoning due to weak PRNG (bsc#1252380)
      * CVE-2025-8677: Fixed resource exhaustion via malformed DNSKEY handling (bsc#1252378)

      New Features:
      * Add dnssec-policy keys configuration check to named-checkconf.
      * Add a new option `manual-mode` to dnssec-policy.
      * Add a new option `servfail-until-ready` to response-policy         zones.
      * Support for parsing HHIT and BRID records has been added.
      * Support for parsing DSYNC records has been added.

      Removed Features:
      * Deprecate the `tkey-gssapi-credential` statement.
      * Obsolete the `tkey-domain` statement.

      Feature Changes:
      * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS         digest type 1.

      Bug Fixes:
      * Missing DNSSEC information when CD bit is set in query.
      * rndc sign during ZSK rollover will now replace signatures.
      * Use signer name when disabling DNSSEC algorithms.
      * Preserve cache when reload fails and reload the server again.
      * Prevent spurious SERVFAILs for certain 0-TTL resource records.
      * Fix unexpected termination if catalog-zones had undefined         `default-primaries`.
      * Stale RRsets in a CNAME chain were not always refreshed.
      * Add RPZ extended DNS error for zones with a CNAME override         policy configured.
      * Fix dig +keepopen option.
      * Log dropped or slipped responses in the query-errors category.
      * Fix synth-from-dnssec not working in some scenarios.
      * Clean enough memory when adding new ADB names/entries under         memory pressure.
      * Prevent spurious validation failures.
      * Ensure file descriptors 0-2 are in use before using libuv         [bsc#1230649]

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it     is possible for an attacker to predict the source port and query ID that BIND will use.
    This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13,     9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through     9.20.13-S1.(CVE-2025-40780)

    Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker     to inject forged data into the cache.
    This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13,     9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through     9.20.13-S1.(CVE-2025-40778)

Tenable has extracted the preceding description block directly from the EulerOS bind security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it     is possible for an attacker to predict the source port and query ID that BIND will use.This issue affects     BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through     9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through     9.20.13-S1.(CVE-2025-40780)

    Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker     to inject forged data into the cache.This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0     through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1     through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization bind security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19951 advisory.

    BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain     Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a     resolver library (routines for applications to use when interfacing with DNS); and tools for verifying     that the DNS server is operating properly.

    Security Fix(es):

    * Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
    * Address various spoofing attacks (CVE-2025-40778)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
275979	TencentOS Server 4: bind (TSSA-2025:0854)	Nessus	Tencent Local Security Checks	2025/11/20	2026/2/24	high
276646	RHEL 8 : bind9.16 (RHSA-2025:21939)	Nessus	Red Hat Local Security Checks	2025/11/24	2025/11/24	high
276754	AlmaLinux 10 : bind (ALSA-2025:21034)	Nessus	Alma Linux Local Security Checks	2025/11/25	2025/11/25	high
277327	Oracle Linux 9 : bind (ELSA-2025-21110)	Nessus	Oracle Linux Local Security Checks	2025/12/3	2026/2/24	high
291308	openSUSE 16 Security Update : bind (openSUSE-SU-2026:20039-1)	Nessus	SuSE Local Security Checks	2026/1/18	2026/2/24	high
297604	EulerOS 2.0 SP13 : bind (EulerOS-SA-2026-1205)	Nessus	Huawei Local Security Checks	2026/2/2	2026/2/2	high
302972	EulerOS Virtualization 2.13.1 : bind (EulerOS-SA-2026-1633)	Nessus	Huawei Local Security Checks	2026/3/18	2026/3/18	high
274563	RHEL 9 : bind (RHSA-2025:19951)	Nessus	Red Hat Local Security Checks	2025/11/10	2025/11/10	high

检测

插件搜索

high

high

high

high

high

high

high

high