Lucene search
HistoryAug 15, 2022 - 1:15 p.m.
CVE-2022-33990
misinterpretation
domain name
cache poisoning
dproxy-nexgen
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
45.0%
Misinterpretation of special domain name characters in dproxy-nexgen (aka dproxy nexgen) leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form.
Affected configurations
Node
dproxy-nexgen_projectdproxy-nexgenMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dproxy-nexgen_project | dproxy-nexgen | - | cpe:2.3:a:dproxy-nexgen_project:dproxy-nexgen:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-33990
2022-08-15 12:10:15
cve
cve
CVE-2022-33990
2022-08-15 13:15:18
prion
prion
Information disclosure
2022-08-15 13:15:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
45.0%
Related for NVD:CVE-2022-33990