synology dns server vulnerabilities and exploits

(subscribe to this query)

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology DNS Server prior to 2.2.2-5027 allows remote authenticated users to delete arbitrary files via unspecified vectors.

Synology Dns Server

In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the...

Isc Bind Isc Bind 9.10.5 Isc Bind 9.11.21 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Opensuse Leap 15.1 Opensuse Leap 15.2 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 16.04 Synology Dns Server Netapp Steelstore Cloud Integrated Storage -

In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward ...

Isc Bind Opensuse Leap 15.1 Opensuse Leap 15.2 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 16.04 Synology Dns Server Netapp Steelstore Cloud Integrated Storage -

The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a data length larger than 32 bytes, a heap buffer overflow is triggered in wlc_wpa_sup_eapol. In the worst case scenario, by sending specially-crafted WiFi packets,...

Synology Router Manager 1.2 Broadcom Bcm4339 Firmware -

1 Article

The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, ...

Synology Router Manager 1.2 Broadcom Bcm4339 Firmware -

1 Article

A vulnerability was found in Samba from version (including) 4.9 to versions prior to 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that is owner (root) only a...

Samba Samba Fedoraproject Fedora 29 Fedoraproject Fedora 30 Synology Diskstation Manager 5.2 Synology Diskstation Manager 6.1 Synology Diskstation Manager 6.2 Synology Directory Server -Synology Router Manager 1.2 Synology Skynas Firmware -Synology Vs960hd Firmware

Heap-based buffer overflow in dnsmasq prior to 2.78 allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

1 EDB exploit9 Github repositories

Directory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS Server prior to 2.2.1-3042 allows remote authenticated malicious users to write arbitrary files via the domain_name parameter.

Synology Dns Server

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook