Lucene search
HistoryAug 15, 2022 - 1:15 p.m.
CVE-2022-33988
dproxy-nexgen
dns
cache-poisoning
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
34.6%
dproxy-nexgen (aka dproxy nexgen) re-uses the DNS transaction id (TXID) value from client queries, which allows attackers (able to send queries to the resolver) to conduct DNS cache-poisoning attacks because the TXID value is known to the attacker.
Affected configurations
Node
dproxy-nexgen_projectdproxy-nexgenMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dproxy-nexgen_project | dproxy-nexgen | - | cpe:2.3:a:dproxy-nexgen_project:dproxy-nexgen:-:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2022-08-15 13:15:00
cvelist
cvelist
CVE-2022-33988
2022-08-15 12:09:50
cve
cve
CVE-2022-33988
2022-08-15 13:15:17
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
34.6%
Related for NVD:CVE-2022-33988