The remote host is running the Delegate DNS Service.  This version of Delegate is vulnerable to a remote Denial of Service flaw.  An attacker exploiting this flaw would send a malformed DNS query to the host. Successful exploitation would result in the loss of availability.

The remote host is running dnsmasq, a DHCP and DNS server.  The remote version of this software is vulnerable to multiple remote vulnerabilities that may allow an attacker to execute arbitrary code on the remote host or perform a DNS cache poisoning attack.

The remote BIND server, according to its version number, has a flaw in the way 'authvalidator()' is implemented.  An attacker may be able to launch a denial of service attack against the remote service. 

The remote BIND DNS server is, according to its version number, vulnerable to a remote buffer overflow in the 'q_usedns' buffer.  An attacker may be able to launch a denial of service attack against the remote BIND Server. 

The remote host is running a version of NSD DNS Server which has a stack buffer overflow vulnerability.  A remote attacker could overwrite one byte in memory, leading to a denial of service.  It is possible, but unlikely, that this vulnerability could result in remote code execution.  

The remote host is running a version of BIND DNS server which fails to randomize the UDP source port.  This could allow an attacker to poison the DNS cache.  A poisoned cache means that DNS clients can be directed to rogue sites and greatly simplifies phishing attacks.

The remote BIND DNS server is vulnerable to a flaw in the way that it handles TSIG responses.  An attacker exploiting this flaw would need to have the ability to send malformed responses to the vulnerable DNS Server.  Successful exploitation would lead to the BIND server crashing. 

The remote version of this software is vulnerable to a denial of service when processing invalid DNS responses. An attacker may exploit this flaw to disable this service remotely.  To exploit this flaw, an attacker would need to be able to inject malformed DNS responses to the queries sent by the remote application.

A successful zone transfer was just observed. An attacker may use the zone information to discover sensitive information about hosts on your network.

An authoritative DNS server is running on this port.

The remote BIND server, according to its version number, is vulnerable to an inverse query overflow. An attacker may use this flaw to gain a root shell on this host.

The remote BIND server is vulnerable to the ZXFR bug that allows an attacker to disable it remotely.

The remote BIND server is vulnerable to several attacks that can allow an attacker to gain root on this system.

The remote BIND server is vulnerable to the SIG cached RR overflow vulnerability. An attacker may use this flaw to gain a shell on this system.

The remote BIND server, according to its version number, is vulnerable to a remote buffer overflow within its resolver code. An attacker may be able to execute arbitrary code by having the remote DNS server make a request and send back a malicious DNS response with an invalid length field.

The remote BIND server is vulnerable to three different vulnerabilities : 
1) The remote BIND server, based on its version number, if running recursive DNS functionality, is vulnerable to a buffer overflow.
2) The remote BIND server is vulnerable to a denial of service (crash) via SIG RR elements with invalid expiry times.
3) The remote BIND server is vulnerable to a denial of service.
When a DNS lookup is requested on a non-existant sub-domain of a valid domain and an OPT resource record with a large UDP payload is attached, the server may fail.   

The remote BIND server is vulnerable to various buffer overflows which may allow an attacker to gain a root shell on this host.

It is possible to determine that the remote BIND server is running BIND 9.x, even if its version number has been hidden, by querying it for the AUTHORS map.

The remote BIND 9 server is vulnerable to a buffer overflow which may be exploited by an attacker to gain a shell on this host, or disable this service entirely.

The remote BIND 9 server is vulnerable to a denial of service attack.

The remote host is running a version of ISC BIND prior to 9.x. Such versions are deprecated and no longer receiving security updates.

ID	Name	Severity
2936	Delegate Compressed DNS Packet Remote DoS	medium
2771	dnsmasq < 2.21 Multiple Remote Vulnerabilities	high
2557	ISC BIND < 8.4.6 dnssec authvalidated Crafted Packet Remote DoS (deprecated)	low
2556	ISC BIND < 8.4.6 q_usedns Array Remote Overflow DoS (deprecated)	medium
5040	NSD packet.c Off-By-One Buffer Overflow	medium
4578	ISC BIND DNS Query ID Field Prediction Cache Poisoning (deprecated)	medium
3523	ISC BIND < 9.3.3 DNS Message Malformed TSIG Remote DoS	medium
3522	DeleGate < 8.11.6 Invalid DNS Response DoS	medium
1017	DNS Server Zone Transfer Allowed	medium
1016	DNS Server Detection	info
1015	ISC BIND < 8.1.2 Inverse-Query Remote Overflow (deprecated)	critical
1014	ISC BIND Version 4 Detection (deprecated)	info
1013	ISC BIND 8 Compressed ZXFR Name Service Query DoS (deprecated)	high
1012	ISC BIND < 8.2.2-P5 Multiple Remote Vulnerabilities (deprecated)	critical
1011	ISC BIND < 4.9.11 Multiple Remote Vulnerabilities (deprecated)	critical
1010	ISC BIND < 8.3.4 Remote Buffer Overflow (deprecated)	critical
1009	ISC BIND < 8.2.7 Multiple Remote Vulnerabilities (deprecated)	critical
1008	ISC BIND < 4.9.5 Multiple DNS Resolver Functions Remote Overflow (deprecated)	critical
1007	ISC BIND < 4.9.7 Inverse-Query Remote Overflow (deprecated)	critical
1006	ISC BIND < 8.3.4 Multiple Remote Vulnerabilities (deprecated)	high
1005	ISC BIND < 4.9.2 Multiple Remote Vulnerabilities (deprecated)	critical
1004	ISC BIND < 8.2.3 Multiple Remote Vulnerabilities (deprecated)	critical
1003	ISC BIND Version 9 Detection	info
1002	ISC BIND 9 Multiple DNS Resolver Functions Remote Overflow	critical
1001	ISC BIND 9 'rdataset' Parameter Malformed DNS Packet DoS	high
1000	ISC BIND DNS Server Unsupported Version Detection	high

Detections

Analytics

DNS Servers Family for Nessus Network Monitor

medium

high

low

medium

medium

medium

medium

medium

medium

info

critical

info

high

critical

critical

critical

critical

critical

critical

high

critical

critical

info

critical

high

high