According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Every `named` instance configured to run as a recursive resolver maintains a cache database holding the     responses to the queries it has recently sent to authoritative servers. The size limit for that cache     database can be configured using the `max-cache-size` statement in the configuration file; it defaults to     90% of the total amount of memory available on the host. When the size of the cache reaches 7/8 of the     configured limit, a cache-cleaning algorithm starts to remove expired and/or least-recently used RRsets     from the cache, to keep memory use below the configured limit. It has been discovered that the     effectiveness of the cache-cleaning algorithm used in `named` can be severely diminished by querying the     resolver for specific RRsets in a certain order, effectively allowing the configured `max-cache-size`     limit to be significantly exceeded. This issue affects BIND 9 versions 9.11.0 through 9.16.41, 9.18.0     through 9.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.
    (CVE-2023-2828)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Every `named` instance configured to run as a recursive resolver maintains a cache database holding the     responses to the queries it has recently sent to authoritative servers. The size limit for that cache     database can be configured using the `max-cache-size` statement in the configuration file; it defaults to     90% of the total amount of memory available on the host. When the size of the cache reaches 7/8 of the     configured limit, a cache-cleaning algorithm starts to remove expired and/or least-recently used RRsets     from the cache, to keep memory use below the configured limit. It has been discovered that the     effectiveness of the cache-cleaning algorithm used in `named` can be severely diminished by querying the     resolver for specific RRsets in a certain order, effectively allowing the configured `max-cache-size`     limit to be significantly exceeded. This issue affects BIND 9 versions 9.11.0 through 9.16.41, 9.18.0     through 9.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.
    (CVE-2023-2828)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-1d526d551c advisory.

    # Update to BIND 9.18.16

    Selected parts from [upstream release     notes](https://downloads.isc.org/isc/bind9/9.18.16/doc/arm/html/notes.html#notes-for-bind-9-18-16). Visit     that for details of bug fixes.

    ## Security Fixes

    -    The overmem cleaning process has been improved, to prevent the cache from significantly exceeding the     configured max-cache-size limit. (CVE-2023-2828)

        ISC would like to thank Shoham Danino from Reichman University, Anat Bremler-Barr from Tel-Aviv     University, Yehuda Afek from Tel-Aviv University, and Yuval Shavitt from Tel-Aviv University for bringing     this vulnerability to our attention. [GL #4055]

    -    A query that prioritizes stale data over lookup triggers a fetch to refresh the stale data in cache.
    If the fetch is aborted for exceeding the recursion quota, it was possible for named to enter an infinite     callback loop and crash due to stack overflow. This has been fixed. (CVE-2023-2911) [GL #4089]

    ## New Features

    -    The system test suite can now be executed with pytest (along with pytest-xdist for parallel     execution). [GL #3978]

    ## Removed Features

    -    TKEY mode 2 (Diffie-Hellman Exchanged Keying) is now deprecated, and will be removed in a future     release. A warning will be logged when the tkey-dhkey option is used in named.conf. [GL #3905]

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4101 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    Security Fix(es):

    * bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * named-pkcs11 crashing into dns-pkcs11 library red-black tree [bind rhel-8.6.0.z] (BZ#2131784)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4152 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    Security Fix(es):

    * bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4154 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    Security Fix(es):

    * bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4152 advisory.

    - Prevent the cache going over the configured limit (CVE-2023-2828)
    - Tighten cache protection against record from forwarders (CVE-2021-25220)
    - Include test of forwarders (CVE-2021-25220)
    - Prevent excessive resource use while processing large delegations.
      (CVE-2022-2795)
    - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
    - Fix memory leak in EdDSA verify processing (CVE-2022-38178)
    - Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
    - Possible assertion failure on DNAME processing (CVE-2021-25215)
    - Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
    - Fix tsig-request verify (CVE-2020-8622)
    - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0967 advisory.

    This advisory aggregates security fixes for the bind SRPM in CIQ LTS 8.6. It addresses 5 CVEs:
    CVE-2023-3341, CVE-2023-4408, CVE-2023-2828, CVE-2023-50868, CVE-2023-50387.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
188516	EulerOS 2.0 SP9 : dhcp (EulerOS-SA-2023-3327)	Nessus	Huawei Local Security Checks	1/16/2024	1/16/2024	high
188578	EulerOS Virtualization 2.9.0 : dhcp (EulerOS-SA-2024-1006)	Nessus	Huawei Local Security Checks	1/16/2024	1/16/2024	high
177800	Fedora 37 : bind / bind-dyndb-ldap (2023-1d526d551c)	Nessus	Fedora Local Security Checks	6/30/2023	11/15/2024	high
178335	RHEL 8 : bind (RHSA-2023:4101)	Nessus	Red Hat Local Security Checks	7/17/2023	11/7/2024	high
178424	RHEL 7 : bind (RHSA-2023:4152)	Nessus	Red Hat Local Security Checks	7/18/2023	11/8/2024	high
178432	RHEL 8 : bind (RHSA-2023:4154)	Nessus	Red Hat Local Security Checks	7/18/2023	11/7/2024	high
178684	Oracle Linux 7 : bind (ELSA-2023-4152)	Nessus	Oracle Linux Local Security Checks	7/20/2023	9/9/2025	high
357134	Rocky Linux 8.6 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (ciqsa-2026_0967)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/12/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high