The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8124-1 advisory.

    Samy Medjahed discovered that Bind incorrectly handled insecure delegation validation. A remote attacker     could possibly use this issue to cause excessive NSEC3 iterations, consuming CPU resources, and leading to     a denial of service. (CVE-2026-1519)

    Vitaly Simonovich discovered that Bind incorrectly handled memory when preparing DNSSEC proofs of non-     existence. A remote attacker could possibly use this issue to cause memory consumption, leading to a     denial of service. This issue only affected Ubuntu 25.10. (CVE-2026-3104)

    Vitaly Simonovich discovered that Bind incorrectly handled authenticated queries containing TKEY records.
    A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service.
    This issue only affected Ubuntu 25.10. (CVE-2026-3119)

    It was discovered that Bind incorrectly handled DNS queries signed with SIG(0). A remote attacker could     possibly use this issue to bypass ACLs. This issue only affected Ubuntu 25.10. (CVE-2026-3591)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : Bind vulnerabilities (USN-8124-1)

high Nessus Plugin ID 304016

Version 1.2

Version 1.1

Version 1.2 Apr 14, 2026, 9:52 AM CVSS metrics ("CVSSv3 score" set to 7.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H") CVSSv3 score source (set to "CVE-2026-1519") CVSSv3 severity (based on CVE-2026-1519, severity increased from "Medium" to "High") Plugin Feed: 202604140952
Version 1.1 Mar 28, 2026, 12:01 PM New Plugin Feed: 202603281201