There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other
    servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC
    validation before being used in answers, as if it had been looked up via traditional recursion, and when
    mirror zone data cannot be validated, BIND falls back to using traditional recursion instead of the mirror
    zone. However, an error in the validity checks for the incoming zone data can allow an on-path attacker to
    replace zone data that was validated with a configured trust anchor with forged data of the attacker's
    choosing. The mirror zone feature is most often used to serve a local copy of the root zone. If an
    attacker was able to insert themselves into the network path between a recursive server using a mirror
    zone and a root name server, this vulnerability could then be used to cause the recursive server to accept
    a copy of falsified root zone data. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to
    9.15.4. (CVE-2019-6475)

  - A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if
    a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to
    9.14.6, and 9.15.0 up to 9.15.4. (CVE-2019-6476)

ISC BIND 9.14.6 / 9.15.4 版及較舊版本受到多個弱點影響。- 鏡像區域有效性檢查中有一個缺陷。區域資料會因此遭到偽造。(CVE-2019-6475) - 為了支援 QNAME 最小化而新增的程式碼中有一項缺失，若轉送工具傳回轉介而非解析查詢，就會造成 named 發生宣告失敗而結束。(CVE-2019-6476)

ISC BIND 版本 9.14.6 / 9.15.4 和较早版本受到多个漏洞影响。- 镜像区域有效性检查中的缺陷。它允许伪造区域数据。(CVE-2019-6475) - 如果转发器返回引用而非解决查询，添加以支持 QNAME 最小化的代码中存在缺陷，可造成 named 退出，并出现断言失败。(CVE-2019-6476)

ISC BINDバージョン9.14.6/9.15.4以前は複数の脆弱性の影響を受けます。- ミラーゾーン有効性確認に欠陥があります。ゾーンデータのなりすましを許す可能性があります。（CVE-2019-6475） - QNAME最小化を支援する目的で追加されたコードに欠陥があり、転送機能でクエリが解決されず、参照が返される場合、namedがアサーションエラーで終了することがあります。（CVE-2019-6476）

An update of the bindutils package has been released.

ISC BIND versions 9.14.6 / 9.15.4 and earlier are affected by multiple vulnerabilities.
  - A flaw in mirror zone validity checking. It can allow zone data to be spoofed.
    (CVE-2019-6475)

  - A defect in code added to support QNAME minimization can cause named to exit with an     assertion failure if a forwarder returns a referral rather than resolving the query.
    (CVE-2019-6476)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
423707	Alpine: multiple bind packages: security update to 9.14.7-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
423707	Alpine: multiple bind packages: security update to 9.14.7-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
130212	ISC BIND 9.14.x < 9.14.7 / 9.15.x < 9.15.5 多個弱點	Nessus	DNS	2019/10/25	2021/6/3	high
130212	ISC BIND 9.14.x < 9.14.7 / 9.15.x < 9.15.5 多个漏洞	Nessus	DNS	2019/10/25	2021/6/3	high
130212	ISC BIND 9.14.x < 9.14.7/9.15.x < 9.15.5の複数の脆弱性	Nessus	DNS	2019/10/25	2021/6/3	high
132987	Photon OS 2.0: Bindutils PHSA-2020-2.0-0199	Nessus	PhotonOS Local Security Checks	2020/1/16	2024/7/23	high
130212	ISC BIND 9.14.x < 9.14.7 / 9.15.x < 9.15.5 Multiple Vulnerabilities	Nessus	DNS	2019/10/25	2021/6/3	high

检测

插件搜索

high

high

high

high

high

high

high