PT-2022-21954 · Dnrd · Dnrd

Haya Shulman + 2 · Published 2022-08-15 · Updated 2022-08-18 · CVE-2022-33992

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions DNRD (aka Domain Name Relay Daemon) version 2.20.3

Description The issue concerns the forwarding and caching of DNS queries with the CD bit set to 1, which results in the disabling of DNSSEC protection provided by upstream resolvers. This affects the security of DNS queries.

Recommendations For DNRD version 2.20.3, consider disabling the caching of DNS queries with the CD bit set to 1 until a patch is available. Restrict access to the DNS query forwarding feature to minimize the risk of exploitation. Avoid using the CD bit in DNS queries until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-33992

Affected Products

Dnrd

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-33992 · Security Note
• https://osv.dev/vulnerability/CVE-2022-33992 · Vendor Advisory
• https://usenix.org/conference/usenixsecurity22/presentation/jeitner · Note
• https://openwall.com/lists/oss-security/2022/08/14/1 · Note
• https://t.me/cibsecurity/48153 · Telegram Post
• http://dnrd.sourceforge.net · Note