CVE-2020-8622

CVE-2020-8622 pertains to ISC BIND and causes an assertion failure leading to a server exit when processing a truncated TSIG-signed response. The vulnerability can be triggered by an attacker on the network path or by exploiting a server receiving a TSIG-signed request, potentially harming availa...

CVE-2020-8623

CVE-2020-8623 affects BIND up to various maintained branches (notably 9.10.0–9.17.x). Root cause: native PKCS#11 code can trigger an assertion failure when processing queries for RSA-signed zones if BIND is built with --enable-native-pkcs11, leading to a crash and potential availability impact. A...

CVE-2020-8621

CVE-2020-8621 affects BIND when QNAME minimization is enabled together with forward-first forwarding, potentially causing the server to crash. The vulnerable ranges are BIND 9.14.0–9.16.5 and 9.17.0–9.17.3; forward-only configurations are not affected. The issue is due to an assertion failure in ...

CVE-2022-27615

CVE-2022-27615 affects Synology DNS Server prior to 2.2.2-5027, via a path traversal in the cgi component that can allow remote authenticated users to delete arbitrary files. The issue arises from improper restriction of pathnames to restricted directories. Connected sources confirm affected soft...

CVE-2017-12074

CVE-2017-12074 affects Synology DNS Server prior to 2.2.1-3042. The vulnerability is a directory traversal flaw in SYNO.DNSServer.Zone.MasterZoneConf that allows remote authenticated attackers to write arbitrary files via the domain_name parameter. Affected product: Synology DNS Server (versions ...