A denial of service (DoS) vulnerability exists in ISC BIND 9 due to TCP Client issues. An unauthenticated, remote attacker can exploit this issue, via DNS Request, to cause the device to stop responding.

The asterisk character ('*') is allowed in DNS zone files, where it is most commonly present as a wildcard at a terminal node of the Domain Name System graph. However, the RFCs do not require and BIND does not enforce that an asterisk character be present only at a terminal node.

A problem can occur when an asterisk is present in an empty non-terminal location within the DNS graph. If such a node exists, after a series of queries, named can reach an inconsistent state that results in the failure of an assertion check in rbtdb.c, followed by the program exiting due to the assertion failure. (CVE-2020-8619)

Impact

You encounter this defect when you have both of the following conditions :

A nameserver provides authoritative service for one or more zones.

At least one zone contains an empty non-terminal entry containing an asterisk character.

A would-be attacker who is allowed to change zone content could, theoretically, introduce such a record in order to exploit this condition to cause denial-of-service (DoS);however, the use of this vector is unlikely because any such attack requires a significant privilege-level and iseasily traceable.

BIND versions from 9.11.14 through 9.11.19 are impacted.

According to its self-reported version number, the installation of ISC BIND running on the remote name server is version 9.10.x prior to 9.11.22, 9.12.x prior to 9.16.6 or 9.17.x prior to 9.17.4. It is, therefore, affected by a denial of service (DoS). If BIND is built with --enable-native-pkcs11 then a specially crafted query for a zone signed with RSA can trigger an assertion failure. An unauthenticated, remote attacker can exploit this issue via a specially crafted query packet to trigger a crash on the server.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, 12.1.x, or 12.2.x. It is, therefore, affected by a vulnerability.

    A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS     software enables an authenticated attacker with network access to execute arbitrary code with root     privileges on the firewall.

    The security risk posed by this issue is minimized by restricting access to the management interface to     only trusted internal IP addresses according to our recommendedbest practice deployment guidelines     (https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-     of-your-palo/ba-p/464431).

    This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual     and M-Series).

    Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Tenable has extracted the preceding description block directly from the PAN-OS security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5.1 + Hotfix-BIGIP-13.1.5.1.0.20.2-ENG / 14.1.5.6 +Hotfix-BIGIP-14.1.5.6.0.10.6-ENG / 15.1.10.2 + Hotfix-BIGIP-15.1.10.2.0.44.2-ENG / 16.1.4.1 + Hotfix- BIGIP-16.1.4.1.0.50.5-ENG / 17.1.0.3 + Hotfix-BIGIP-17.1.0.3.0.75.4-ENG / 17.1.1 + Hotfix-BIGIP-17.1.1.0.2.6-ENG. It is, therefore, affected by a vulnerability as referenced in the K000137353 advisory.

  - Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network     access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary     system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not     evaluated (CVE-2023-46747)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host appears to be running 3CTftpSvc, a TFTPD server for Windows.

The version of Tftpd32 installed on the remote host appears to be affected by a buffer overflow vulnerability involving a long transport mode when getting or putting files. By leveraging this flaw, a remote attacker may be able to crash the remote service or execute code on the affected host subject to the privileges under which the service operates, by default LOCAL SYSTEM.

The remote host is running a version of MySQL which older than version 4.0.24 or 4.1.10a.  Such versions are potentially affected by multiple issues.
 
  - MySQL uses predictable file names when creating     temporary tables, which allows local users with 'CREATE     TEMPORARY TABLE' privileges to overwrite arbitrary files     via a symlink attack. (CVE-2005-0711)

  - A flaw exists that may allow a malicious user to gain     access to unauthorized privileges when an authenticated     user with 'INSERT' and 'DELETE' privileges bypasses     library path restrictions using 'INSERT INTO' to modify     the 'mysql.func' table. (CVE-2005-0709)

  - A flaw exists that may allow a mlicious user to load     arbitrary libraries when an authenticated user with     'INSERT' and 'DELETE' privileges use the 'CREATE     FUNCTION' command to specify and load an arbitrary     custom library. (CVE-2005-0710)

The remote host appears to be running a version of Solaris 10 that contains a vulnerability in its ICMP handling process that can be leveraged by an unauthenticated remote attacker to panic the affected host.

The version of HCL BigFix Server installed on the remote host is 10.0.x through 10.0.16 or 11.0.x through 11.0.7. It is, therefore, affected by a vulnerability in the bundled CA certificate store:

  - BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20     still trust certificates whose private keys have been compromised. When BigFix Platform validates servers     using such a bundle, an on-path attacker can impersonate remote servers and tamper with files downloaded     by the application. The issue is resolved by using bundle version 2026/10/20 or later. The fixed bundle is     available starting from BES Support v1520. (CVE-2026-108013)

HCL has not published a fixed HCL BigFix Platform release for this issue. The corrected certificate bundle is delivered as content, so the installed platform version does not change once the remediation has been applied.
Nessus cannot verify the version of the deployed certificate bundle, so this finding is flagged as a potential vulnerability.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 11.2.x, 12.1.x, or 12.2.x. It is, therefore, affected by a vulnerability.

    Palo Alto Networks is aware of the vulnerability in Brotli: CVE-2026-111497.

    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3     through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state     memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary     code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries     between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.Brotli is commonly     used by many HTTP-based applications including Node.js.

    Palo Alto Networks is actively investigating its product portfolio and cloud services to determine     potential impact from this vulnerability. The sections below will be updated as our analysis progresses     and additional information or remediation status becomes available.

Tenable has extracted the preceding description block directly from the PAN-OS security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
131735	ISC BIND 9.11.0 / 9.11.x < 9.11.13 / 9.11.x < 9.11.13-S1 / 9.12.x < 9.12.5-P2 / 9.14.x < 9.14.8 / 9.15 / 9.15.x < 9.15.6 Vulnerability	Nessus	DNS	12/6/2019	5/22/2020	high
139704	F5 Networks BIG-IP : BIND vulnerability (K19807532)	Nessus	F5 Networks Local Security Checks	8/20/2020	10/21/2026	medium
139917	ISC BIND 9.10.x < 9.11.22, 9.12.x < 9.16.6, 9.17.x < 9.17.4 DoS	Nessus	DNS	8/27/2020	6/3/2021	high
365666	Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x / 12.2.x Vulnerability	Nessus	Palo Alto Local Security Checks	10/14/2026	10/16/2026	high
184199	F5 Networks BIG-IP : BIG-IP Configuration utility unauthenticated remote code execution vulnerability (K000137353)	Nessus	F5 Networks Local Security Checks	11/2/2023	10/3/2024	critical
23735	3CTftpSvc Long Transport Mode Remote Overflow	Nessus	Windows	11/28/2006	3/6/2019	critical
17313	MySQL < 4.0.24 / 4.1.10a Multiple Vulnerabilities	Nessus	Databases	3/11/2005	11/15/2018	medium
29980	Solaris 10 ICMP Packet Handling DoS	Nessus	Denial of Service	1/15/2008	1/14/2021	high
373597	HCL BigFix Server 10.0.x <= 10.0.16 / 11.0.x <= 11.0.7 Certificate Validation (KB0134758)	Nessus	Misc.	10/29/2026	10/29/2026	medium
372075	Palo Alto Networks PAN-OS 11.2.x / 12.1.x / 12.2.x Vulnerability	Nessus	Palo Alto Local Security Checks	10/26/2026	10/29/2026	critical

Detections

Analytics

Plugins Search

high

medium

high

high

critical

critical

medium

high

medium

critical