CVE-2022-33993

Опубликовано: 15 авг. 2022

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

Misinterpretation of special domain name characters in DNRD (aka Domain Name Relay Daemon) 2.20.3 leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form.

Ссылки

http://dnrd.sourceforge.net/
Product
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/08/14/1
Mailing List
Third Party Advisory
https://www.usenix.org/conference/usenixsecurity21/presentation/jeitner
Third Party Advisory
https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner
Third Party Advisory
http://dnrd.sourceforge.net/
Product
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/08/14/1
Mailing List
Third Party Advisory
https://www.usenix.org/conference/usenixsecurity21/presentation/jeitner
Third Party Advisory
https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:domain_name_relay_daemon_project:domain_name_relay_daemon:2.20.3:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00285

Низкий

5.3 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-5wg5-mm98-g4ph