CVEvulnerability
CVE-2022-33991
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-08-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-290
Description
dproxy-nexgen (aka dproxy nexgen) forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers.
Affected configurations
• dproxy-nexgen project dproxy-nexgen
Related
Weakness · CWE (1)
- CWE-290 Authentication Bypass by Spoofing weakness
References
- https://sourceforge.net/projects/dproxy/ Third Party Advisory
- https://www.openwall.com/lists/oss-security/2022/08/14/3 Exploit, Mailing List, Third Party Advisory
- https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner Third Party Advisory
- https://sourceforge.net/projects/dproxy/ Third Party Advisory
- https://www.openwall.com/lists/oss-security/2022/08/14/3 Exploit, Mailing List, Third Party Advisory
- https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner Third Party Advisory