The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-8155 advisory.

    [32:9.16.23-0.22.5]
    - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone       (CVE-2026-1519)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-11371 advisory.

    - Resolve CVE-2026-1519 [Orabug: 39275755]
    - Resolve CVE-2025-40778 [Orabug: 38699863]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the  packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver     may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are     circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-     does-my-authoritative-server-make-recursive-queries).This issue affects BIND 9 versions 9.11.0 through     9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through     9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.(CVE-2026-1519)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0362 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2026-1519:
    If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver     may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are     circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-     does-my-authoritative-server-make-recursive-queries).
    This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20,     9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through     9.20.20-S1.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver     may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are     circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-     does-my-authoritative-server-make-recursive-queries)._x000D_     This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20,     9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through     9.20.20-S1.(CVE-2026-1519)

Tenable has extracted the preceding description block directly from the EulerOS bind security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:25083 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    Security Fix(es):

    * bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver     may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are     circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-     does-my-authoritative-server-make-recursive-queries).This issue affects BIND 9 versions 9.11.0 through     9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through     9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.(CVE-2026-1519)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization bind security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack.  If a victim     resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources.
    This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22,     9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through     9.20.22-S1.(CVE-2026-3592)

    Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not     Internet (`IN`) -- for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes (`ANY` or     `NONE`) in the question section. Specially crafted requests reaching the affected code paths -- recursion,     dynamic updates (`UPDATE`), zone change notifications (`NOTIFY`), or processing of `IN`-specific record     types in non-`IN` data -- can cause assertion failures in `named`. This issue affects BIND 9 versions     9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1     through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-5946)

    If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver     may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are     circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-     does-my-authoritative-server-make-recursive-queries).
    This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20,     9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through     9.20.20-S1.(CVE-2026-1519)

    BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to     excessive memory consumption when receiving and processing maliciously-constructed packets.  Typically     these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS     environments.
    This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22,     9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through     9.20.22-S1.(CVE-2026-3039)

Tenable has extracted the preceding description block directly from the EulerOS bind security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
306504	Oracle Linux 8 : bind9.16 (ELSA-2026-8155)	Nessus	Oracle Linux Local Security Checks	4/15/2026	4/15/2026	high
315174	Oracle Linux 7 : bind (ELSA-2026-11371)	Nessus	Oracle Linux Local Security Checks	5/18/2026	5/18/2026	high
328660	EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2722)	Nessus	Huawei Local Security Checks	7/21/2026	7/21/2026	high
316694	TencentOS Server 3: bind (TSSA-2026:0362)	Nessus	Tencent Local Security Checks	5/26/2026	5/26/2026	high
320279	EulerOS 2.0 SP13 : bind (EulerOS-SA-2026-2322)	Nessus	Huawei Local Security Checks	6/10/2026	6/10/2026	high
320515	RHEL 8 : bind9.16 (RHSA-2026:25083)	Nessus	Red Hat Local Security Checks	6/11/2026	6/11/2026	high
320695	EulerOS Virtualization 2.13.1 : bind (EulerOS-SA-2026-2366)	Nessus	Huawei Local Security Checks	6/12/2026	6/12/2026	high
333456	EulerOS 2.0 SP11 : bind (EulerOS-SA-2026-3058)	Nessus	Huawei Local Security Checks	8/8/2026	8/8/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high