Security Fix(es) :

  - unbound: amplification of an incoming query into a large     number of queries directed to a target (CVE-2020-12662)

  - unbound: infinite loop via malformed DNS answers     received from upstream servers (CVE-2020-12663)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.3 / 12.1.6 / 13.1.3.5 / 14.1.2.7 / 15.1.0.5 / 16.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the K37661551 advisory.

    CVE-2020-12662Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an     NXNSAttack issue. This is triggered by random subdomains in the NSDNAME in NS     records.CVE-2020-12663Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from     upstream servers.ImpactThere are three types of DNS cache configurations available on the BIG-IP system: a     transparent cache, a resolver cache, and a validating resolver cache. Only BIG-IP systems licensed for DNS     services and using the DNS Cache feature are vulnerable.Notes:The DNS Cache feature is available only when     you licensethe BIG-IP systemfor DNS Services, but you do NOT have to provisionthe BIG-IP GTM or BIG-     IP DNS moduleon your BIG-IP system.Starting with BIG-IP 12.0.0, F5 renamed BIG-IP GTM to BIG-IP DNS.DNS     Express does not use Unbound and is not vulnerable to either CVE-2020-12662 or     CVE-2020-12663.CVE-2020-12662When the DNS Cache feature is enabled on the BIG-IP system, an attacker may     exploit this vulnerability to generate a large number of communications between the BIG-IP system and the     victim's authoritative DNS server to cause a denial-of-service (DoS) attack.Note: For more information     about NXNSAttack, refer to theNXNSAttack research paper.CVE-2020-12663A remote attacker may be able to     perform a DoS attack on a DNS cache configured on the BIG-IP system by causing Unbound to become     unresponsive.

Tenable has extracted the preceding description block directly from the F5 Networks BIG-IP security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2416 advisory.

  - unbound: amplification of an incoming query into a large number of queries directed to a target     (CVE-2020-12662)

  - unbound: infinite loop via malformed DNS answers received from upstream servers (CVE-2020-12663)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0083 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2020-12662:
    Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an NXNSAttack issue. This     is triggered by random subdomains in the NSDNAME in NS records.

    CVE-2020-12663:
    Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.01, has unbound packages installed that are affected by multiple vulnerabilities:

  - Unbound 1.6.4 through 1.9.4 contain a vulnerability in     the ipsec module that can cause shell code execution     after receiving a specially crafted answer. This issue     can only be triggered if unbound was compiled with     `--enable-ipsecmod` support, and ipsecmod is enabled and     used in the configuration. (CVE-2019-18934)

  - Unbound before 1.10.1 has an infinite loop via malformed     DNS answers received from upstream servers.
    (CVE-2020-12663)

  - Unbound before 1.10.1 has Insufficient Control of     Network Message Volume, aka an NXNSAttack issue. This     is triggered by random subdomains in the NSDNAME in NS     records. (CVE-2020-12662)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Unbound 1.6.4 through 1.9.4 contain a vulnerability in     the ipsec module that can cause shell code execution     after receiving a specially crafted answer. This issue     can only be triggered if unbound was compiled with     `--enable-ipsecmod` support, and ipsecmod is enabled     and used in the configuration.(CVE-2019-18934)

  - Unbound before 1.10.1 has Insufficient Control of     Network Message Volume, aka an 'NXNSAttack' issue. This     is triggered by random subdomains in the NSDNAME in NS     records.(CVE-2020-12662)

  - Unbound before 1.10.1 has an infinite loop via     malformed DNS answers received from upstream     servers.(CVE-2020-12663)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0488 advisory.

    This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 9.2. It addresses 12 CVEs:
    CVE-2011-4528, CVE-2014-8602, CVE-2019-16866, CVE-2023-50868, CVE-2020-12662, and 7 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1369 advisory.

    This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 9.6. It addresses 28 CVEs:
    CVE-2026-42534, CVE-2026-32792, CVE-2011-4528, CVE-2014-8602, CVE-2025-11411, and 23 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
137742	Scientific Linux Security Update : unbound on SL6.x i386/x86_64 (20200622)	Nessus	Scientific Linux Local Security Checks	6/23/2020	3/6/2024	high
138233	F5 Networks BIG-IP : Unbound DNS Cache vulnerabilities (K37661551)	Nessus	F5 Networks Local Security Checks	7/9/2020	4/7/2026	high
145822	CentOS 8 : unbound (CESA-2020:2416)	Nessus	CentOS Local Security Checks	2/1/2021	3/23/2021	high
236148	Alibaba Cloud Linux 3 : 0083: unbound (ALINUX3-SA-2021:0083)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	high
138770	NewStart CGSL MAIN 6.01 : unbound Multiple Vulnerabilities (NS-SA-2020-0037)	Nessus	NewStart CGSL Local Security Checks	7/21/2020	2/29/2024	high
142292	EulerOS 2.0 SP2 : unbound (EulerOS-SA-2020-2403)	Nessus	Huawei Local Security Checks	11/3/2020	2/12/2024	high
353828	Rocky Linux 9.2 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (ciqsa-2026_0488)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/12/2026	high
354372	Rocky Linux 9.6 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (ciqsa-2026_1369)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/12/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high