CVE-2022-33990

Misinterpretation of special domain name characters in dproxy-nexgen aka dproxy nexgen leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form...

CVE-2022-33990

Misinterpretation of special domain name characters in dproxy-nexgen aka dproxy nexgen leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form...

CVE-2022-33989

dproxy-nexgen aka dproxy nexgen uses a static UDP source port selected randomly only at boot time in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks...

CVE-2022-33988

dproxy-nexgen aka dproxy nexgen re-uses the DNS transaction id TXID value from client queries, which allows attackers able to send queries to the resolver to conduct DNS cache-poisoning attacks because the TXID value is known to the attacker...

CVE-2022-34294

totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks...

CVE-2022-33993

Misinterpretation of special domain name characters in DNRD aka Domain Name Relay Daemon 2.20.3 leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form...

CVE-2022-33993

Misinterpretation of special domain name characters in DNRD aka Domain Name Relay Daemon 2.20.3 leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form...

CVE-2022-33992

DNRD aka Domain Name Relay Daemon 2.20.3 forwards and caches DNS queries with the CD aka checking disabled bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers...

CVE-2022-33992

DNRD aka Domain Name Relay Daemon 2.20.3 forwards and caches DNS queries with the CD aka checking disabled bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers...

CVE-2022-33992

DNRD aka Domain Name Relay Daemon 2.20.3 forwards and caches DNS queries with the CD aka checking disabled bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers...

Information disclosure

Misinterpretation of special domain name characters in DNRD aka Domain Name Relay Daemon 2.20.3 leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form...

CVE-2022-33990

CVE-2022-33990 affects dproxy-nexgen (dproxy nexgen). The issue stems from misinterpretation of special domain name characters causing domain names and their IP addresses to be cached in the misinterpreted form, enabling cache poisoning. The CVSS 3.1 base score is 7.5 (Network, Low attack complex...

CVE-2022-33990

Misinterpretation of special domain name characters in dproxy-nexgen aka dproxy nexgen leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form...

CVE-2022-33992

DNRD (Domain Name Relay Daemon) version 2.20.3 forwards and caches DNS queries with the CD (checking disabled) bit set to 1, which disables DNSSEC protection provided by upstream resolvers. The vulnerability is caused by the CD bit being set on queries, undermining DNSSEC validation upstream. Pub...

CVE-2022-33993

Misinterpretation of special domain name characters in DNRD aka Domain Name Relay Daemon 2.20.3 leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form...

CVE-2022-33993

CVE-2022-33993 affects the Domain Name Relay Daemon (DNRD) version 2.20.3. The issue arises from misinterpretation of certain domain name characters, causing domain names and their associated IP addresses to be cached in a misinterpreted form, which can lead to cache poisoning. The Red Hat entry ...

dproxy 安全漏洞

dproxy is an intelligent caching DNS proxy by Matthew Pratt, a personal developer. A security vulnerability exists in dproxy, which stems from the fact that its incorrect resolution of special domain name characters can lead to cache poisoning, as domain names and their associated IP addresses ar...

PT-2022-21952 · Unknown · Dproxy-Nexgen

Name of the Vulnerable Software and Affected Versions: dproxy-nexgen affected versions not specified Description: The issue arises from the misinterpretation of special domain name characters in dproxy-nexgen, leading to cache poisoning. This occurs because domain names and their associated IP...

totd 安全特征问题漏洞

totd is a small DNS proxy nameserver from the individual developer F.W. Dillema. A security signature issue vulnerability exists in totd version 1.5.3, which stems from the use of a fixed UDP source port in upstream queries sent to the DNS resolver, which would allow DNS cache poisoning...

CVE-2022-33993: Undefined Security Weakness

Misinterpretation of special domain name characters in DNRD aka Domain Name Relay Daemon 2.20.3 leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form...