Vulnerability in Dproxy-Nexgen Project
CVE-2022-33991
dproxy-nexgen (aka dproxy nexgen) forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers.
EPSS: 0.008 (52.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Dproxy-nexgen_project Dproxy-nexgen
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (Exploit, Mailing List, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2022-33991?
- CVE-2022-33991 is a medium-severity vulnerability in Dproxy-Nexgen Project, classified under Authentication Bypass by Spoofing. CVSS score: 5.3/10. Published 2022-08-15.
- How severe is CVE-2022-33991?
- Medium severity. CVSS v3 base score is 5.3 out of 10.