Dproxy-Nexgen Project Dproxy-Nexgen
4 CVEs affecting Dproxy-Nexgen Project Dproxy-Nexgen. Latest disclosed: 2022-08-15. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-33990 | High | 7.5 | 2022-08-15 | Misinterpretation of special domain name characters in dproxy-nexgen (aka dproxy nexgen) leads to cache poisoning because domain names and their associated IP… |
CVE-2022-33988 | High | 7.5 | 2022-08-15 | dproxy-nexgen (aka dproxy nexgen) re-uses the DNS transaction id (TXID) value from client queries, which allows attackers (able to send queries to the resolver… |
CVE-2022-33991 | Medium | 5.3 | 2022-08-15 | dproxy-nexgen (aka dproxy nexgen) forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1. This leads to disabling of DNSSEC protectio… |
CVE-2022-33989 | Medium | 5.3 | 2022-08-15 | dproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot time) in upstream queries sent to DNS resolvers. This allows DN… |