Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 攻擊者可傳送通知要求，造成新的次要網域新增至 bind 後端，但也會造成上述後端將其組態更新為無效組態，進而導致該後端在下次重新啟動時無法執行，而且需要手動進行修正。(CVE-2026-33608)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 攻击者可发送通知请求，该请求会造成将新的辅助域添加到 bind 后端，但也会使上述后端将其配置更新为无效配置，从而导致该后端在下次重新启动时无法运行，并且需要手动操作进行修复。(CVE-2026-33608)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 攻撃者は、新しいセカンダリドメインを bind バックエンドに追加する原因となる通知リクエストを送信できるものの、バックエンドにその設定を無効な設定に更新させるため、次の再起動でバックエンドを実行できなくなり、手動操作による修正が必要になります。(CVE-2026-33608)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6233 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6233-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     April 28, 2026                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : pdns     CVE ID         : CVE-2026-33257 CVE-2026-33260 CVE-2026-33608                      CVE-2026-33609 CVE-2026-33610 CVE-2026-33611

    Multiple security vulnerabilities were discovered in the dnsdist DNS     loadbalancer, which could result in denial of service, information     disclosure or ACL bypass.

    For the stable distribution (trixie), these problems have been fixed in     version 4.9.14-0+deb13u1.

    We recommend that you upgrade your pdns packages.

    For the detailed security status of pdns please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/pdns

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An attacker can send a notify request that causes a new secondary domain to be added to the bind backend,     but causes said backend to update its configuration to an invalid one, leading to the backend no longer     able to run on the next restart, requiring manual operation to fix it. (CVE-2026-33608)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
309878	Linux Distros 未修補弱點：CVE-2026-33608	Nessus	Misc.	2026/4/23	2026/4/29	critical
309878	Linux Distros 未修补的漏洞：CVE-2026-33608	Nessus	Misc.	2026/4/23	2026/4/29	critical
309878	Linux Distros のパッチ未適用の脆弱性: CVE-2026-33608	Nessus	Misc.	2026/4/23	2026/4/29	critical
310796	Debian dsa-6233 : pdns-backend-bind - security update	Nessus	Debian Local Security Checks	2026/4/29	2026/4/29	critical
309878	Linux Distros Unpatched Vulnerability : CVE-2026-33608	Nessus	Misc.	2026/4/23	2026/4/29	critical

检测

插件搜索

critical

critical

critical

critical

critical