dnsdiag

DNS 测量、故障排除与安全审计工具集 你是否曾怀疑你的互联网服务提供商（ISP）在拦截你的 DNS 流量？ 你是否注意到 DNS 响应中出现异常行为，或被重定向到错误的地址，并怀疑 DNS 出了问题？我们提供一套工具，用于对你的 DNS 请求和响应进行基本审计，帮助你确保 DNS 按预期运行。 通过 dnsping，你可以测量任意 DNS 服务器对任意查询的响应时间。类似于常规的 ping 工具，dnsping 为 DNS 请求提供了类似的功能，帮助你监控服务器的响应能力。 你还可以使用 dnstraceroute 来追踪 DNS...

policymaker

policymaker 実際の脆弱性開示ポリシー（VDP、セーフハーバー、security.txt、DNS Security TXT）を数分で生成。弁護士は不要です。 disclose.io プロジェクト の一部 — 脆弱性開示のためのオープンでベンダーに依存しないインフラストラクチャ。エコシステムを参照 → policymaker.disclose.io は、無料のオープンソースジェネレーターです。組織に関するいくつかの簡単な質問に答えるだけで、完全で防御可能なセキュリティ開示設定を生成します: 調整された開示期間の有無にかかわらず、完全な脆弱性開示ポリシー（VDP） 、...

Alibaba Cloud Linux 3 : 0272: unbound (ALINUX3-SA-2026:0272)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0272 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-44690: In NLnet Labs Unbound 1.7.0 up to a...

bind: bind9: Incorrect acceptance of NSEC3 records

BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses...

Oracle Linux 9 : bind9.18 (ELSA-2026-55442)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55442 advisory. - Fix NSEC3 signer validation CVE-2026-10723, RHEL-215704 - Reject out-of-zone NSEC next owner names CVE-2026-13321, RHEL-213314 - Fix cache exhaustio...

MiracleLinux 8 : unbound-1.16.2-5.14.el8_10 (AXSA:2026-1573:10)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1573:10 advisory. unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 Tenable has extracted the preceding...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bind (UTSA-2026-102689)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102689 advisory. BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9...

Oracle Linux 9 : unbound (ELSA-2026-55841)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55841 advisory. 1.24.2-3.4 - Fix CVE-2026-55973 RHEL-212809 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes

A flaw was found in Unbound. Insufficient validation of the RRSIG.Labels field, combined with premature cache writes during RFC 8198 aggressive NSEC processing, can lead to cache poisoning. This vulnerability allows a malicious actor, controlling a single delegated zone, to poison arbitrary sibli...

ALSA-2026:55784 Important: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 For more details about the security issues, including the impact, a CVSS...

Fedora 43 : pdns-recursor (2026-ac51ed6e75)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ac51ed6e75 advisory. Update to latest upstream version Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Important: Red Hat Security Advisory: ldns security update

An update for ldns is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 9 : ldns (RHSA-2026:54254)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:54254 advisory. The ldns packages contain a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define...

ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching

A flaw was found in ldns. When applications use ldns as a resolver over User Datagram Protocol UDP, it fails to properly match the query's destination address and port with the response's source address and port. Additionally, the query ID and question are not matched with the response. This...

SUSE SLES15 Security Update : bind (SUSE-SU-2026:3452-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3452-1 advisory. - CVE-2026-10723: accepting incorrect child-zone NSEC3 records as valid can allow an attacker to forge authenticated NXDOMAIN...

Security update for bind

This update for bind fixes the following issues CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. CVE-2026-11721: cache poisoning...

SUSE-SU-2026:3476-1 Security update for bind

This update for bind fixes the following issues - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-11331: Potential wildcard CNAME RPZ policy bypass bsc1271984. - CVE-2026-11622: Potential memory usage beyond configured limits bsc1271986. - CVE-2026-11721: Cache...

Security update for bind

This update for bind fixes the following issues: CVE-2026-10723: accepting incorrect child-zone NSEC3 records as valid can allow an attacker to forge authenticated NXDOMAIN responses for sibling zones bsc1271982. CVE-2026-10822: storing a DNS key record with an invalid PRIVATEDNS algorithm...

openSUSE 16: bind / bind-modules-bdbhpt / bind-modules-generic / etc (openSUSE-SU-2026:21489-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21489-1 advisory. This update for bind fixes the following issues - Upgrade to release 9.20.26 - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982....

SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2026:3426-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3426-1 advisory. Upgrade to release 9.20.26. Security issues fixed: - CVE-2026-10723: incorrect acceptance of NSEC3 records...