CVE-2015-2809

The Multicast DNS (mDNS) responder in Synology DiskStation Manager (DSM) before 3.1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets to the Avahi component.

• CWE-200

• http://www.kb.cert.org/vuls/id/550620Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/BLUU-9TLSHDThird Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/73683
• http://www.kb.cert.org/vuls/id/550620Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/BLUU-9TLSHDThird Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/73683

Published

Apr 1, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2803SQL injection vulnerability in mod1/index.php in the Akronym…
• CVE-2015-2804The management web interface in Alcatel-Lucent OmniSwitch 64…
• CVE-2015-2805Cross-site request forgery (CSRF) vulnerability in sec/conte…
• CVE-2015-2806Stack-based buffer overflow in asn1_der_decoding in libtasn1…
• CVE-2015-2807Cross-site scripting (XSS) vulnerability in js/window.php in…
• CVE-2015-2808The RC4 algorithm, as used in the TLS protocol and SSL proto…3.7
• CVE-2015-2810Integer overflow in the HwpApp::CHncSDS_Manager function in …
• CVE-2015-2811XML external entity (XXE) vulnerability in ReportXmlViewer i…
• CVE-2015-2812XML external entity (XXE) vulnerability in XMLValidationComp…
• CVE-2015-2813XML external entity (XXE) vulnerability in SAP Mobile Platfo…
• CVE-2015-2814SAP EMR Unwired (com.sap.mobile.healthcare.emr.v2) and Clini…
• CVE-2015-2815Buffer overflow in the C_SAPGPARAM function in the NetWeaver…