Detections
Analytics
Debian dsa-6505 : bind9 - security update
medium Nessus Plugin ID 346980
Synopsis
The remote Debian host is missing one or more security-related updates.Description
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6505 advisory.- ------------------------------------------------------------------------- Debian Security Advisory DSA-6505-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 17, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : bind9 CVE ID : CVE-2026-19033 CVE-2026-19662 CVE-2026-19666 CVE-2026-19667 CVE-2026-19668 CVE-2026-75029 CVE-2026-76163 CVE-2026-77119 CVE-2026-77692 CVE-2026-80274 CVE-2026-81563 CVE-2026-81736
Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in denial of service or cache poisoning.
For the stable distribution (trixie), these problems have been fixed in version 1:9.20.29-1~deb13u1.
We recommend that you upgrade your bind9 packages.
For the detailed security status of bind9 please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/bind9
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: [email protected]
Tenable has extracted the preceding description block directly from the Debian security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade the bind9 packages.See Also
https://packages.debian.org/source/trixie/bind9
https://security-tracker.debian.org/tracker/CVE-2026-19033
https://security-tracker.debian.org/tracker/CVE-2026-19662
https://security-tracker.debian.org/tracker/CVE-2026-19666
https://security-tracker.debian.org/tracker/CVE-2026-19667
https://security-tracker.debian.org/tracker/CVE-2026-19668
https://security-tracker.debian.org/tracker/CVE-2026-75029
https://security-tracker.debian.org/tracker/CVE-2026-76163
https://security-tracker.debian.org/tracker/CVE-2026-77119
https://security-tracker.debian.org/tracker/CVE-2026-77692
https://security-tracker.debian.org/tracker/CVE-2026-80274
https://security-tracker.debian.org/tracker/CVE-2026-81563
https://security-tracker.debian.org/tracker/CVE-2026-81736
https://security-tracker.debian.org/tracker/source-package/bind9
Plugin Details
Severity: Medium
ID: 346980
File Name: debian_DSA-6505.nasl
Version: 1.1
Type: Local
Agent: unix
Family: Debian Local Security Checks
Published: 9/17/2026
Updated: 9/17/2026
Supported Sensors: Nessus Agent, Continuous Assessment, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.2
Percentile: 96.35
CVSS v2
Risk Factor: Medium
Base Score: 6.1
Temporal Score: 4.5
Vector: CVSS2#AV:N/AC:H/Au:N/C:N/I:C/A:P
CVSS Score Source: CVE-2026-19033
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.7
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:debian:debian_linux:13.0, p-cpe:/a:debian:debian_linux:bind9-dev, p-cpe:/a:debian:debian_linux:bind9-dnsutils, p-cpe:/a:debian:debian_linux:bind9-doc, p-cpe:/a:debian:debian_linux:bind9-host, p-cpe:/a:debian:debian_linux:bind9-libs, p-cpe:/a:debian:debian_linux:bind9-utils, p-cpe:/a:debian:debian_linux:bind9
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Exploit Ease: No known exploits are available
Patch Publication Date: 9/17/2026
Vulnerability Publication Date: 9/16/2026
Reference Information
CVE: CVE-2026-19033, CVE-2026-19662, CVE-2026-19666, CVE-2026-19667, CVE-2026-19668, CVE-2026-75029, CVE-2026-76163, CVE-2026-77119, CVE-2026-77692, CVE-2026-80274, CVE-2026-81563, CVE-2026-81736
IAVA: 2026-A-1029