安全ID : QSA-22-10

Multiple Vulnerabilities in ISC BIND


  • 发布日期 : April 19, 2022

  • 通用漏洞披露 : CVE-2022-0667 | CVE-2022-0635 | CVE-2022-0396 | CVE-2021-25220

  • 未受影响产品: QNAP products

严重程度

状态

未受影响


Summary

Internet Systems Consortium (ISC) recently disclosed multiple vulnerabilities in ISC BIND:

  • CVE-2022-0667: Assertion failure on delayed DS lookup
  • CVE-2022-0635: DNAME insist with synth-from-dnssec enabled
  • CVE-2022-0396: DoS from specifically crafted TCP packets
  • CVE-2021-25220: DNS forwarders - cache poisoning vulnerability

QNAP products are not affected.

修订历史: V1.0 (April 19, 2022) - Published

选择规格

      显示更多 隐藏更多
      open menu
      back to top