Dns Server vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

DS

Product

Dns Server

by Synology · last CVE Jul 28, 2022

5

CVEs

0

On KEV

8.1

Max CVSS

0

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 0High 3Medium 2Low 0

Severity

All severities5 Critical0 High3 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Dns Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-27615	8.1	1%	Jul 28	Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology DNS Server before 2.2.2-5027 allows remote authenticated… Affected: before 2.2.2-5027
CVE-2020-8623	7.5	7%	Aug 21	In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a… Affected: before 2.2.2-5027
CVE-2020-8621	7.5	3%	Aug 21	In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to… Affected: before 2.2.2-5027