Vulnerabilities > CVE-2022-33992 - Unspecified vulnerability in Domain Name Relay Daemon Project Domain Name Relay Daemon 2.20.3
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
DNRD (aka Domain Name Relay Daemon) 2.20.3 forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
References
- http://dnrd.sourceforge.net/
- http://dnrd.sourceforge.net/
- https://www.openwall.com/lists/oss-security/2022/08/14/1
- https://www.openwall.com/lists/oss-security/2022/08/14/1
- https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner
- https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner