The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d9f9394ecd advisory.

    # Update to 9.21.14 (rhbz#2394406)

    ## Security Fixes:

    - DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677)
    - Address various spoofing attacks. (CVE-2025-40778)
    - Cache-poisoning due to weak pseudo-random number generator. (CVE-2025-40780)

    ## New Features:

    - Add dnssec-policy keys configuration check to named-checkconf.
    - Add support for synthetic records.
    - Support for zone-specific plugins.
    - Support for additional tokens in the zone file name template.

    ## Removed Features:

    - Remove randomized RRset ordering.

    and bug fixes

    https://downloads.isc.org/isc/bind9/9.21.14/doc/arm/html/notes.html#notes-for-bind-9-21-14




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Fedora 42 : bind9-next (2025-d9f9394ecd)

high Nessus Plugin ID 275502

Version 1.1