CVE-2015-2809

Synology DiskStation Manager < 3.1 - Information Disclosure via mDNS Responder

Title source: llm
STIX 2.1

Description

The Multicast DNS (mDNS) responder in Synology DiskStation Manager (DSM) before 3.1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets to the Avahi component.

References (3)

Core 3
Core References
Third Party Advisory, US Government Resource x_refsource_confirm
http://www.kb.cert.org/vuls/id/BLUU-9TLSHD
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/73683
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/550620

Scores

EPSS 0.0172
EPSS Percentile 82.6%

Details

CWE
CWE-200
Status published
Products (1)
synology/diskstation_manager < 3.0
Published Apr 01, 2015
Tracked Since Feb 18, 2026