The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-002009 advisory.

    BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported     Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT     status for an indefinite period of time, even after the client has terminated the connection.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:8068 advisory.

  - BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 ->     9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including     Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL.
    The cache could become poisoned with incorrect records leading to queries being made to the wrong servers,     which might also result in false information being returned to clients. (CVE-2021-25220)

  - BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported     Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT     status for an indefinite period of time, even after the client has terminated the connection.
    (CVE-2022-0396)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0248 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2022-3080:
      By sending specific queries to the resolver, an attacker can cause named to crash.

      CVE-2021-25220:
      BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 ->     9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including     Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL.
    The cache could become poisoned with incorrect records leading to queries being made to the wrong servers,     which might also result in false information being returned to clients.

      CVE-2022-0396:
      BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported     Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT     status for an indefinite period of time, even after the client has terminated the connection.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4253:06 advisory.

    * bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)
      * bind: DoS from specifically crafted TCP packets (CVE-2022-0396)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5332-1 advisory.

    Xiang Li, Baojun Liu, Chaoyi Lu, and Changgen Zou discovered that Bind incorrectly handled certain bogus     NS records when using forwarders. A remote attacker could possibly use this issue to manipulate cache     results. (CVE-2021-25220)

    It was discovered that Bind incorrectly handled certain crafted TCP streams. A remote attacker could     possibly use this issue to cause Bind to consume resources, leading to a denial of service. This issue     only affected Ubuntu 21.10. (CVE-2022-0396)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:8068 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    Security Fix(es):

    * bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)

    * bind: DoS from specifically crafted TCP packets (CVE-2022-0396)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the bindutils package has been released.

ID	Name	Product	Family	Published	Updated	Severity
348932	Unity Linux 20.1070-8ae Security Update: bind (UTSA-2022-002009)	Nessus	Unity Linux Local Security Checks	9/22/2026	9/22/2026	medium
184497	Rocky Linux 9 : bind (RLSA-2022:8068)	Nessus	Rocky Linux Local Security Checks	11/6/2023	11/14/2023	medium
239129	TencentOS Server 3: bind (TSSA-2022:0248)	Nessus	Tencent Local Security Checks	6/16/2025	11/20/2025	medium
292240	MiracleLinux 8 : bind9.16-9.16.23-0.9.el8.1 (AXSA:2022-4253:06)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	medium
159059	Ubuntu 18.04 LTS / 20.04 LTS : Bind vulnerabilities (USN-5332-1)	Nessus	Ubuntu Local Security Checks	3/18/2022	9/3/2025	medium
167605	RHEL 9 : bind (RHSA-2022:8068)	Nessus	Red Hat Local Security Checks	11/16/2022	11/7/2024	medium
203239	Photon OS 4.0: Bindutils PHSA-2022-4.0-0168	Nessus	PhotonOS Local Security Checks	7/23/2024	11/2/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium