According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching     resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS     support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to upstream     name servers, i.e., at least one of the 'send-client-subnet', 'client-subnet-zone' or 'client-subnet-     always-forward' options is used. Resolvers supporting ECS need to segregate outgoing queries to     accommodate for different outgoing ECS information. This re-opens up resolvers to a birthday paradox     attack (Rebirthday Attack) that tries to match the DNS transaction ID in order to cache non-ECS poisonous     replies.(CVE-2025-5994)

Tenable has extracted the preceding description block directly from the EulerOS unbound security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching     resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS     support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to upstream     name servers, i.e., at least one of the 'send-client-subnet', 'client-subnet-zone' or 'client-subnet-     always-forward' options is used. Resolvers supporting ECS need to segregate outgoing queries to     accommodate for different outgoing ECS information. This re-opens up resolvers to a birthday paradox     attack (Rebirthday Attack) that tries to match the DNS transaction ID in order to cache non-ECS poisonous     replies.(CVE-2025-5994)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization unbound security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to AHV-10.0.1.4. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0.1.4 advisory.

  - There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could     exceed the number of columns available. This could lead to a memory corruption issue. We recommend     upgrading to version 3.50.2 or above. (CVE-2025-6965)

  - The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some     previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed     malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how     the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library.
    (CVE-2025-8058)

  - A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching     resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS     support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to upstream     name servers, i.e., at least one of the 'send-client-subnet', 'client-subnet-zone' or 'client-subnet-     always-forward' options is used. Resolvers supporting ECS need to segregate outgoing queries to     accommodate for different outgoing ECS information. This re-opens up resolvers to a birthday paradox     attack (Rebirthday Attack) that tries to match the DNS transaction ID in order to cache non-ECS poisonous     replies. (CVE-2025-5994)

  - Perl threads have a working directory race condition where file operations may target unintended paths. If     a directory handle is open at thread creation, the process-wide current working directory is temporarily     changed in order to clone that handle for the new thread, which is visible from any third (or more) thread     already running. This may lead to unintended operations such as loading code or accessing files from     unexpected locations, which a local attacker may be able to exploit. The bug was introduced in commit     11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6 (CVE-2025-40909)

  - In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-     based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema     with certain identity constraints, or a crafted XML schema must be used. (CVE-2025-32415)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks.
    Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick     resolvers to update their delegation information for the zone. Usually these RRSets are used to update the     resolver's knowledge of the zone's name servers. A malicious actor can exploit the possible poisonous     effect by injecting NS RRSets (and possibly their respective address records) in a reply. This could be     done for example by trying to spoof a packet or fragmentation attacks. Unbound would then proceed to     update the NS RRSet data it already has since the new data has enough trust for it, i.e., in-zone data for     the delegation point. Unbound 1.24.1 includes a fix that scrubs unsolicited NS RRSets (and their     respective address records) from replies mitigating the possible poison effect. Unbound 1.24.2 includes an     additional fix that scrubs unsolicited NS RRSets (and their respective address records) from YXDOMAIN and     non-referral nodata replies, further mitigating the possible poison effect.(CVE-2025-11411)

    A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching     resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS     support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to upstream     name servers, i.e., at least one of the 'send-client-subnet', 'client-subnet-zone' or 'client-subnet-     always-forward' options is used. Resolvers supporting ECS need to segregate outgoing queries to     accommodate for different outgoing ECS information. This re-opens up resolvers to a birthday paradox     attack (Rebirthday Attack) that tries to match the DNS transaction ID in order to cache non-ECS poisonous     replies.(CVE-2025-5994)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization unbound security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the unbound package has been released.

ID	Name	Product	Family	Published	Updated	Severity
271316	EulerOS 2.0 SP13 : unbound (EulerOS-SA-2025-2281)	Nessus	Huawei Local Security Checks	10/24/2025	10/24/2025	high
271329	EulerOS 2.0 SP13 : unbound (EulerOS-SA-2025-2313)	Nessus	Huawei Local Security Checks	10/24/2025	10/24/2025	high
279278	EulerOS Virtualization 2.13.0 : unbound (EulerOS-SA-2025-2602)	Nessus	Huawei Local Security Checks	12/18/2025	12/18/2025	high
266317	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0.1.4)	Nessus	Misc.	9/30/2025	9/30/2025	high
302639	EulerOS Virtualization 2.12.0 : unbound (EulerOS-SA-2026-1524)	Nessus	Huawei Local Security Checks	3/16/2026	3/16/2026	high
275322	Photon OS 4.0: Unbound PHSA-2025-4.0-0904	Nessus	PhotonOS Local Security Checks	11/13/2025	11/13/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high