Login Request a demo
DS
Product
Dns Server
by Synology · last CVE Jul 28, 2022
5
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 2Low 0
Severity
All severities5Critical0High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Dns Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-27615
8.1
1%
Jul 28
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology DNS Server before 2.2.2-5027 allows remote authenticated…
Affected: before 2.2.2-5027
CVE-2020-8623
7.5
7%
Aug 21
In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a…
Affected: before 2.2.2-5027
CVE-2020-8621
7.5
3%
Aug 21
In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to…
Affected: before 2.2.2-5027
CVE-2020-8622
6.5
6%
Aug 21
In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a…
Affected: before 2.2.2-5028
CVE-2017-12074
6.5
2%
Aug 24
Directory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS Server before 2.2.1-3042 allows remote authenticated attackers to write arbitrary files…
Affected: through 2.2.0-3032
Showing 5