An update of the bindutils package has been released.

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 ->     9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND     9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing     can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it     possible for its internal data structures to grow almost infinitely, which may cause significant delays in     client query processing. (CVE-2021-25219)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of AIX installed on the remote host is prior to APAR IJ37224. It is, therefore, affected by a vulnerability as referenced in the IJ37224 advisory.

  - In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 ->     9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND     9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing     can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it     possible for its internal data structures to grow almost infinitely, which may cause significant delays in     client query processing. (CVE-2021-25219)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37222. It is, therefore, affected by a vulnerability as referenced in the IJ37222 advisory.

  - In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 ->     9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND     9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing     can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it     possible for its internal data structures to grow almost infinitely, which may cause significant delays in     client query processing. (CVE-2021-25219)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37225. It is, therefore, affected by a vulnerability as referenced in the IJ37225 advisory.

  - In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 ->     9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND     9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing     can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it     possible for its internal data structures to grow almost infinitely, which may cause significant delays in     client query processing. (CVE-2021-25219)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3773-1 advisory.

  - In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 ->     9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND     9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing     can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it     possible for its internal data structures to grow almost infinitely, which may cause significant delays in     client query processing. (CVE-2021-25219)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5126-1 advisory.

    Kishore Kumar Kothapalli discovered that Bind incorrectly handled the lame cache when processing     responses. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting     in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-4994 advisory.

  - In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 ->     9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND     9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing     can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it     possible for its internal data structures to grow almost infinitely, which may cause significant delays in     client query processing. (CVE-2021-25219)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2807 advisory.

    CVE-2021-25219 Kishore Kumar Kothapalli discovered that the lame server cache in BIND, a DNS server     implementation, can be abused by an attacker to significantly degrade resolver performance, resulting in     denial of service (large delays for responses for client queries and DNS timeouts on client hosts).
    CVE-2018-5740 deny-answer-aliases is a little-used feature intended to help recursive server operators     protect end users against DNS rebinding attacks, a potential method of circumventing the security model     used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to     experience an assertion failure in name.c. For Debian 9 stretch, these problems have been fixed in version     1:9.10.3.dfsg.P4-12.3+deb9u10. We recommend that you upgrade your bind9 packages. For the detailed     security status of bind9 please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/bind9 Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3657-1 advisory.

    - CVE-2021-25219: Fixed lame cache that could have been abused to severely degrade resolver performance     (bsc#1192146).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
155319	Photon OS 3.0: Bindutils PHSA-2021-3.0-0327	Nessus	PhotonOS Local Security Checks	11/12/2021	8/22/2025	medium
155328	Photon OS 1.0: Bindutils PHSA-2021-1.0-0448	Nessus	PhotonOS Local Security Checks	11/12/2021	7/23/2024	medium
155330	Photon OS 2.0: Bindutils PHSA-2021-2.0-0412	Nessus	PhotonOS Local Security Checks	11/12/2021	7/23/2024	medium
157209	EulerOS 2.0 SP9 : bind (EulerOS-SA-2022-1001)	Nessus	Huawei Local Security Checks	1/28/2022	9/27/2022	medium
158425	EulerOS 2.0 SP10 : bind (EulerOS-SA-2022-1249)	Nessus	Huawei Local Security Checks	2/25/2022	9/27/2022	medium
158513	AIX (IJ37224)	Nessus	AIX Local Security Checks	3/2/2022	10/23/2024	medium
158519	AIX (IJ37222)	Nessus	AIX Local Security Checks	3/2/2022	10/23/2024	medium
158520	AIX (IJ37225)	Nessus	AIX Local Security Checks	3/2/2022	10/23/2024	medium
155701	openSUSE 15 Security Update : bind (openSUSE-SU-2021:3773-1)	Nessus	SuSE Local Security Checks	11/24/2021	9/27/2022	medium
154704	Ubuntu 18.04 LTS / 20.04 LTS : Bind vulnerability (USN-5126-1)	Nessus	Ubuntu Local Security Checks	10/28/2021	8/28/2024	medium
154707	Debian DSA-4994-1 : bind9 - security update	Nessus	Debian Local Security Checks	10/28/2021	2/17/2023	medium
154882	Debian DLA-2807-1 : bind9 - LTS security update	Nessus	Debian Local Security Checks	11/3/2021	1/24/2025	high
155304	SUSE SLED12: bind / bind-chrootenv / bind-devel / bind-doc / bind-utils / etc (SUSE-SU-2021:3657-1)	Nessus	SuSE Local Security Checks	11/12/2021	6/25/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium