The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6107 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6107-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     January 22, 2026                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : bind9     CVE ID         : CVE-2025-13878

    Vlatko Kosturjak discovered that BIND, a DNS server implementation, does     not properly handle malformed BRID/HHIT records, which may result in     denial of service (named daemon crash).

    For the oldstable distribution (bookworm), this problem has been fixed     in version 1:9.18.44-1~deb12u1.

    For the stable distribution (trixie), this problem has been fixed in     version 1:9.20.18-1~deb13u1.

    We recommend that you upgrade your bind9 packages.

    For the detailed security status of bind9 please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/bind9

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dsa-6107 : bind9 - security update

high Nessus Plugin ID 295331

Version 1.4

Version 1.3

Version 1.1

Version 1.4 May 1, 2026, 7:22 AM IAVM reference Plugin Feed: 202605010722
Version 1.3 Jan 23, 2026, 3:45 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601231545
Version 1.1 Jan 23, 2026, 7:02 AM New Plugin Feed: 202601230702