BIND
The most widely used open-source DNS server software, maintained by ISC. It is a core component of the Internet domain name system infrastructure and is responsible for domain name resolution services.
Timeline (last 90 days)
The affected products involved in the five newly added vulnerabilities are: the ProFTPD file read/write vulnerability (severity 10.0), ONLYOFFICE Docs path traversal (9.8), Apache Struts command injection (8.1), BIND denial of service (7.5), and Strapi plaintext exposure (7.2).
The fixed version requirements for the five vulnerabilities are: BIND 9.9.7-P2 or 9.10.2-P3 and higher, ProFTPD 1.3.5a or disabling mod_copy, Apache Struts 2.3.20.3/2.3.24.3/2.3.28.1, ONLYOFFICE 5.6.3 and higher, and Strapi 4.8.0 and higher.
All Facts (3)
dig（Domain Information Groper）是BIND软件包附带的DNS查询诊断工具，由ISC（Internet Systems Consortium）维护
90%UnverifiedThe affected products involved in the five newly added vulnerabilities are: the ProFTPD file read/write vulnerability (severity 10.0), ONLYOFFICE Docs path traversal (9.8), Apache Struts command injection (8.1), BIND denial of service (7.5), and Strapi plaintext exposure (7.2).
50%UnverifiedThe fixed version requirements for the five vulnerabilities are: BIND 9.9.7-P2 or 9.10.2-P3 and higher, ProFTPD 1.3.5a or disabling mod_copy, Apache Struts 2.3.20.3/2.3.24.3/2.3.28.1, ONLYOFFICE 5.6.3 and higher, and Strapi 4.8.0 and higher.
50%