Danial Mahadzir

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** A malicious authoritative server can send a crafted zone through the `ZoneToCache()` function, which results in cache poisoning. Cache poisoning is a technique used to introduce corrupt or fraudulent data into a cache, causing the system to return the wrong information to users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** ECS zero scoped answers are incorrectly stored in the packet cache. This issue specifically affects configurations where ECS (EDNS Client Subnet), an extension to DNS that allows a recursive resolver to include the client's subnet in queries to authoritative servers, is enabled. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.