The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1789 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    Security Fix(es):

    * bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

    * bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)

    * bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)

    * bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution     (CVE-2023-5679)

    * bind: Querying RFC 1918 reverse zones may cause an assertion failure when nxdomain-redirect is     enabled (CVE-2023-5517)

    * bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1789 advisory.

    - Add downstream change complementing CVE-2023-50387
    - Prevent increased CPU load on large DNS messages (CVE-2023-4408)
    - Prevent assertion failure when nxdomain-redirect is used with      RFC 1918 reverse zones (CVE-2023-5517)
    - Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
    - Specific recursive query patterns may lead to an out-of-memory       condition (CVE-2023-6516)
    - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387       CVE-2023-50868)

    bind-dyndb-ldap

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1803 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    Bind-dyndb-ldap provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and     internal caching, to lift the load off of your LDAP server.

    Security Fix(es):

    * bind9: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)

    * bind9: Querying RFC 1918 reverse zones may cause an assertion failure when nxdomain-redirect is     enabled (CVE-2023-5517)

    * bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution     (CVE-2023-5679)

    * bind9: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)

    * bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)

    * bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0113 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2023-4408:
    A flaw was found in the bind package. This issue may allow a remote attacker with no specific privileges     to craft a specially long DNS message leading to an excessive and uncontrolled CPU usage, the server being     unavailable, and a Denial of Service.

    CVE-2023-5517:
    A flaw was found in the bind package which may result in a Denial of Service in `named` process. This is a     result of a reachable assertion, leading `named` to prematurely terminate when both conditions are met:
    nxdomain-redirect for the queried domain is configured and the resolver receives a PTR query, used for a     reverse DNS lookup, for a RFC 1918 address that would normally result in an authoritative `NXDOMAIN`     response. A single query matching both conditions can lead to a Denial of Service in the named     application.

    CVE-2023-5679:
    A flaw was found in the bind package. This issue may allow an attacker to query in a DNS64 enabled     resolver node with a domain name triggering a server-stale data, triggering a code assertion, and     resulting in a crash of `named` processes. This can allow a remote unauthenticated user to cause a Denial     Of Service in the DNS server.

    CVE-2023-6516:
    A flaw was found in the `named` application, part of the bind9 package, which uses a cache database to     speeds up DNS queries. To maintain its efficiency when running as a recursive name resolver, `named`     performs a cache database clean up under certain conditions. This issue may allow an attacker to craft a     continuous set of crafted queries, which can induce `named` to trigger the cleanup process with a high     frequency, making the internal cleanup items queue to grow indefinitely. This can lead to an uncontrolled     memory consumption and resource starvation, potentially making `named` consume all available memory in the     host, leading to a Denial of Service of the targeted system.

    CVE-2023-50387:
    Processing specially crafted responses coming from DNSSEC-signed zones can lead to uncontrolled CPU usage,     leading to a Denial of Service in the DNSSEC-validating resolver side.

    This vulnerability applies only for systems where DNSSEC validation is enabled.

    CVE-2023-50868:
    A flaw was found in bind9. By flooding a DNSSEC resolver with responses coming from a DNSEC-signed zone     using NSEC3, an attacker can lead the targeted resolver to a CPU exhaustion, further leading to a Denial     of Service on the targeted host.

    This vulnerability applies only for systems where DNSSEC validation is enabled.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0821 advisory.

    This advisory aggregates security fixes for the bind9.16 SRPM in CIQ LTS 8.6. It addresses 13 CVEs:
    CVE-2022-3094, CVE-2023-5517, CVE-2023-3341, CVE-2023-50868, CVE-2023-4408, and 8 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0995 advisory.

    This advisory aggregates security fixes for the bind-dyndb-ldap SRPM in CIQ LTS 9.2. It addresses 6 CVEs:
    CVE-2023-4408, CVE-2023-6516, CVE-2023-50387, CVE-2023-5517, CVE-2023-5679, and 1 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
193227	RHEL 9 : bind (RHSA-2024:1789)	Nessus	Red Hat Local Security Checks	4/11/2024	12/24/2025	high
193261	Oracle Linux 9 : bind (ELSA-2024-1789)	Nessus	Oracle Linux Local Security Checks	4/12/2024	12/24/2025	high
193319	RHEL 9 : bind and bind-dyndb-ldap security updates (Important) (RHSA-2024:1803)	Nessus	Red Hat Local Security Checks	4/15/2024	12/24/2025	high
239311	TencentOS Server 3: bind9.16 (TSSA-2024:0113)	Nessus	Tencent Local Security Checks	6/16/2025	11/20/2025	high
355217	Rocky Linux 8.6 [CIQ] Security Update: bind9.16 / bind9.16-chroot / bind9.16-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0821)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/12/2026	medium
356506	Rocky Linux 9.2 [CIQ] Security Update: bind-dyndb-ldap / bind-dyndb-ldap-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0995)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/12/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

medium

high