Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d9f9394ecd advisory.

    # Update to 9.21.14 (rhbz#2394406)

    ## Security Fixes:

    - DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677)
    - Address various spoofing attacks. (CVE-2025-40778)
    - Cache-poisoning due to weak pseudo-random number generator. (CVE-2025-40780)

    ## New Features:

    - Add dnssec-policy keys configuration check to named-checkconf.
    - Add support for synthetic records.
    - Support for zone-specific plugins.
    - Support for additional tokens in the zone file name template.

    ## Removed Features:

    - Remove randomized RRset ordering.

    and bug fixes

    https://downloads.isc.org/isc/bind9/9.21.14/doc/arm/html/notes.html#notes-for-bind-9-21-14




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b68f7f541d advisory.

    # Update to 9.21.14 (rhbz#2394406)

    ## Security Fixes:

    - DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677)
    - Address various spoofing attacks. (CVE-2025-40778)
    - Cache-poisoning due to weak pseudo-random number generator. (CVE-2025-40780)

    ## New Features:

    - Add dnssec-policy keys configuration check to named-checkconf.
    - Add support for synthetic records.
    - Support for zone-specific plugins.
    - Support for additional tokens in the zone file name template.

    ## Removed Features:

    - Remove randomized RRset ordering.

    and bug fixes

    https://downloads.isc.org/isc/bind9/9.21.14/doc/arm/html/notes.html#notes-for-bind-9-21-14





Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4110-1 advisory.

    - CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found (bsc#1252378).
    - CVE-2025-40778: Address various spoofing attacks (bsc#1252379).
    - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21111 advisory.

    BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND     includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for     applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating     properly.

    Security Fix(es):

    * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

    * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

    * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21034 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    Security Fix(es):

    * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

    * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

    * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:19912 advisory.

    * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
      * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
      * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19950 advisory.

    - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
    - Refuse malformed DNSKEY records (CVE-2025-8677)
    - Address various spoofing attacks (CVE-2025-40778)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19950 advisory.

    BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND     includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for     applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating     properly.

    Security Fix(es):

    * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

    * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

    * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3e245eae46 advisory.

    Fix dual-signed domains verification, when one of algorithms is not supported.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-66fb3fa6b0 advisory.

    # Update to 9.18.41 (rhbz#2405786)

    ## Security fixes:
    - DNSSEC validation fails if matching but invalid DNSKEY is found.
    ([CVE-2025-8677](https://kb.isc.org/docs/cve-2025-8677))
    - Address various spoofing attacks. ([CVE-2025-40778](https://kb.isc.org/docs/cve-2025-40778))
    - Cache-poisoning due to weak pseudo-random number generator.
    ([CVE-2025-40780](https://kb.isc.org/docs/cve-2025-40780))

    ## New Features:
    - Support for parsing HHIT and BRID records has been added.

    ## Removed Features:
    - Deprecate the tkey-domain statement.
    - Deprecate the tkey-gssapi-credential statement.

    ## Bug Fixes:
    - Prevent spurious SERVFAILs for certain 0-TTL resource records.
    - Missing DNSSEC information when CD bit is set in query.

    https://downloads.isc.org/isc/bind9/9.18.41/doc/arm/html/notes.html#notes-for-bind-9-18-41

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000157317 advisory.

    Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead     to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13,     9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-8677)

Tenable has extracted the preceding description block directly from the F5 Networks BIG-IP security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1255 advisory.

    Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker     to inject forged data into the cache.This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0     through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1     through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1. (CVE-2025-40778)

    In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it     is possible for an attacker to predict the source port and query ID that BIND will use.This issue affects     BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through     9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.
    (CVE-2025-40780)

    Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead     to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13,     9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1. (CVE-2025-8677)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19912 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    Security Fix(es):

    * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

    * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

    * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19912 advisory.

    - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
    - Refuse malformed DNSKEY records (CVE-2025-8677)
    - Address various spoofing attacks (CVE-2025-40778)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3054 advisory.

    Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead     to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13,     9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1. (CVE-2025-8677)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4364 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4364-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                   Andreas Henriksson     November 04, 2025                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : bind9     Version        : 1:9.16.50-1~deb11u4     CVE ID         : CVE-2025-8677 CVE-2025-40778 CVE-2025-40780     Debian Bug     :

    Brief introduction

    CVE-2025-8677

        Resource exhaustion via malformed DNSKEY handling

    CVE-2025-40778

        Cache poisoning attacks with unsolicited RRs

    CVE-2025-40780

        Cache poisoning due to weak PRNG

    For Debian 11 bullseye, these problems have been fixed in version     1:9.16.50-1~deb11u4.

    We recommend that you upgrade your bind9 packages.

    For the detailed security status of bind9 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/bind9

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3903-1 advisory.

    Upgrade to release 9.20.15:

    - CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found (bsc#1252378).
    - CVE-2025-40778: Address various spoofing attacks (bsc#1252379).
    - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-92566203fd advisory.

    # Update to 9.18.41 (rhbz#2405786)

    ## Security fixes:
    - DNSSEC validation fails if matching but invalid DNSKEY is found.
    ([CVE-2025-8677](https://kb.isc.org/docs/cve-2025-8677))
    - Address various spoofing attacks. ([CVE-2025-40778](https://kb.isc.org/docs/cve-2025-40778))
    - Cache-poisoning due to weak pseudo-random number generator.
    ([CVE-2025-40780](https://kb.isc.org/docs/cve-2025-40780))

    ## New Features:
    - Support for parsing HHIT and BRID records has been added.

    ## Removed Features:
    - Deprecate the tkey-domain statement.
    - Deprecate the tkey-gssapi-credential statement.

    ## Bug Fixes:
    - Prevent spurious SERVFAILs for certain 0-TTL resource records.
    - Missing DNSSEC information when CD bit is set in query.

    https://downloads.isc.org/isc/bind9/9.18.41/doc/arm/html/notes.html#notes-for-bind-9-18-41

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-10c407da27 advisory.

    # Update to 9.18.41 (rhbz#2405786)

    ## Security fixes:
    - DNSSEC validation fails if matching but invalid DNSKEY is found.
    ([CVE-2025-8677](https://kb.isc.org/docs/cve-2025-8677))
    - Address various spoofing attacks. ([CVE-2025-40778](https://kb.isc.org/docs/cve-2025-40778))
    - Cache-poisoning due to weak pseudo-random number generator.
    ([CVE-2025-40780](https://kb.isc.org/docs/cve-2025-40780))

    ## New Features:
    - Support for parsing HHIT and BRID records has been added.

    ## Removed Features:
    - Deprecate the tkey-domain statement.
    - Deprecate the tkey-gssapi-credential statement.

    ## Bug Fixes:
    - Prevent spurious SERVFAILs for certain 0-TTL resource records.
    - Missing DNSSEC information when CD bit is set in query.

    https://downloads.isc.org/isc/bind9/9.18.41/doc/arm/html/notes.html#notes-for-bind-9-18-41


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead     to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13,     9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1. (CVE-2025-8677)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-5a73e9e251 advisory.

    # Update to 9.18.41 (rhbz#2405786)

    ## Security fixes:
    - DNSSEC validation fails if matching but invalid DNSKEY is found.
    ([CVE-2025-8677](https://kb.isc.org/docs/cve-2025-8677))
    - Address various spoofing attacks. ([CVE-2025-40778](https://kb.isc.org/docs/cve-2025-40778))
    - Cache-poisoning due to weak pseudo-random number generator.
    ([CVE-2025-40780](https://kb.isc.org/docs/cve-2025-40780))

    ## New Features:
    - Support for parsing HHIT and BRID records has been added.

    ## Removed Features:
    - Deprecate the tkey-domain statement.
    - Deprecate the tkey-gssapi-credential statement.

    ## Bug Fixes:
    - Prevent spurious SERVFAILs for certain 0-TTL resource records.
    - Missing DNSSEC information when CD bit is set in query.

    https://downloads.isc.org/isc/bind9/9.18.41/doc/arm/html/notes.html#notes-for-bind-9-18-41


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the bindutils package has been released.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6033 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6033-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     October 23, 2025                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : bind9     CVE ID         : CVE-2025-8677 CVE-2025-40778 CVE-2025-40780

    Several vulnerabilities were discovered in BIND, a DNS server     implementation, which may result in cache poisoning or denial of service.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 1:9.18.41-1~deb12u1.

    For the stable distribution (trixie), these problems have been fixed in     version 1:9.20.15-1~deb13u1.

    We recommend that you upgrade your bind9 packages.

    For the detailed security status of bind9 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/bind9

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7836-1 advisory.

    Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed DNSKEY records. A remote     attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of     service. (CVE-2025-8677)

    Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Bind incorrectly accepted certain     records from answers. A remote attacker could possibly use this issue to perform a cache poisoning attack.
    (CVE-2025-40778)

    Amit Klein and Omer Ben Simhon discovered that Bind used a weak PRNG. A remote attacker could possibly use     this issue to perform a cache poisoning attack. (CVE-2025-40780)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of bind installed on the remote host is prior to 9.18.41 / 9.20.15. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-295-01 advisory.

    New bind packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the bind security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
275502	Fedora 42 : bind9-next (2025-d9f9394ecd)	Nessus	Fedora Local Security Checks	high
275500	Fedora 43 : bind9-next (2025-b68f7f541d)	Nessus	Fedora Local Security Checks	high
275489	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : bind (SUSE-SU-2025:4110-1)	Nessus	SuSE Local Security Checks	high
275160	RHEL 9 : bind9.18 (RHSA-2025:21111)	Nessus	Red Hat Local Security Checks	high
274801	RHEL 10 : bind (RHSA-2025:21034)	Nessus	Red Hat Local Security Checks	high
274617	AlmaLinux 10 : bind (ALSA-2025:19912)	Nessus	Alma Linux Local Security Checks	high
274582	Oracle Linux 9 : bind9.18 (ELSA-2025-19950)	Nessus	Oracle Linux Local Security Checks	high
274562	RHEL 9 : bind9.18 (RHSA-2025:19950)	Nessus	Red Hat Local Security Checks	high
274544	Fedora 43 : bind (2025-3e245eae46)	Nessus	Fedora Local Security Checks	high
274533	Fedora 43 : bind / bind-dyndb-ldap (2025-66fb3fa6b0)	Nessus	Fedora Local Security Checks	high
274523	F5 Networks BIG-IP : BIND vulnerability (K000157317)	Nessus	F5 Networks Local Security Checks	high
274499	Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2025-1255)	Nessus	Amazon Linux Local Security Checks	high
274429	RHEL 10 : bind (RHSA-2025:19912)	Nessus	Red Hat Local Security Checks	high
274391	Oracle Linux 10 : bind (ELSA-2025-19912)	Nessus	Oracle Linux Local Security Checks	high
274072	Amazon Linux 2 : bind, --advisory ALAS2-2025-3054 (ALAS-2025-3054)	Nessus	Amazon Linux Local Security Checks	high
272278	Debian dla-4364 : bind9 - security update	Nessus	Debian Local Security Checks	high
272148	SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2025:3903-1)	Nessus	SuSE Local Security Checks	high
272015	Fedora 42 : bind / bind-dyndb-ldap (2025-92566203fd)	Nessus	Fedora Local Security Checks	high
272011	Fedora 41 : bind / bind-dyndb-ldap (2025-10c407da27)	Nessus	Fedora Local Security Checks	high
271613	Linux Distros Unpatched Vulnerability : CVE-2025-8677	Nessus	Misc.	high
271421	Fedora 44 : bind / bind-dyndb-ldap (2025-5a73e9e251)	Nessus	Fedora Local Security Checks	high
271399	Photon OS 5.0: Bindutils PHSA-2025-5.0-0652	Nessus	PhotonOS Local Security Checks	high
271361	Debian dsa-6033 : bind9 - security update	Nessus	Debian Local Security Checks	high
271258	Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : Bind vulnerabilities (USN-7836-1)	Nessus	Ubuntu Local Security Checks	high
271217	Slackware Linux 15.0 / current bind Multiple Vulnerabilities (SSA:2025-295-01)	Nessus	Slackware Local Security Checks	high

Detections

Analytics

CVE-2025-8677

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high