Security ID : QSA-22-10
Multiple Vulnerabilities in ISC BIND
Release date : April 19, 2022
CVE identifier : CVE-2022-0667 | CVE-2022-0635 | CVE-2022-0396 | CVE-2021-25220
Not affected products: QNAP products
Severity
None
Status
Not Affected
Summary
Internet Systems Consortium (ISC) recently disclosed multiple vulnerabilities in ISC BIND:
- CVE-2022-0667: Assertion failure on delayed DS lookup
- CVE-2022-0635: DNAME insist with synth-from-dnssec enabled
- CVE-2022-0396: DoS from specifically crafted TCP packets
- CVE-2021-25220: DNS forwarders - cache poisoning vulnerability
QNAP products are not affected.
Revision History: V1.0 (April 19, 2022) - Published
