Insecure configuration in dproxy - CVE-2022-33991
Published: August 16, 2022
Vulnerability identifier: #VU66539
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-33991
CWE-ID: CWE-16
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to dproxy forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1, which in turn disables DNSSEC protection provided by upstream resolvers and allows to perform DNS cache poisoning.
Affected software
dproxy
How to mitigate CVE-2022-33991
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.