The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3498 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3498-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     July 18, 2023                                 https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : bind9     Version        : 1:9.11.5.P4+dfsg-5.1+deb10u9     CVE ID         : CVE-2023-2828

    It was discovered that there was a potential denial of service (DoS)     in bind9, the popular Domain Name Server (DNS) server.

    Shoham Danino, Anat Bremler-Barr, Yehuda Afek and Yuval Shavitt     discovered that a flaw in the cache-cleaning algorithm used in named     can cause that named's configured cache size limit can be     significantly exceeded, potentially resulting in a denial of service     attack.

    For Debian 10 buster, this problem has been fixed in version     1:9.11.5.P4+dfsg-5.1+deb10u9.

    We recommend that you upgrade your bind9 packages.

    For the detailed security status of bind9 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/bind9

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-3498 : bind9 - security update

high Nessus Plugin ID 178479

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Jan 22, 2025, 5:44 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202501221744
Version 1.1 Sep 21, 2023, 4:26 PM IAVM reference Plugin Feed: 202309211626
Version 1.0 Jul 19, 2023, 7:58 PM New Plugin Feed: 202307191958