CVE-2022-33992 - DNRD (aka Domain Name Relay Daemon) 2.20.3 forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1

Back Back to CVE browser

HIGH

DNRD (aka Domain Name Relay Daemon) 2.20.3 forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1

Published Aug 15, 2022

7.5

HIGH

CVSS 3.1

EPSS 1.00%

Description

DNRD (aka Domain Name Relay Daemon) 2.20.3 forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://dnrd.sourceforge.net/
x_refsource_MISCProductThird Party Advisory
https://www.openwall.com/lists/oss-security/2022/08/14/1
x_refsource_MISCMailing ListThird Party Advisory
https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
http://dnrd.sourceforge.net/		x_refsource_MISCProductThird Party Advisory
https://www.openwall.com/lists/oss-security/2022/08/14/1		x_refsource_MISCMailing ListThird Party Advisory
https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 15, 2022

Updated Aug 3, 2024

Reserved Jun 18, 2022

Link CVE-2022-33992

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-33992

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-33992