PT-2022-22110 · Totd · Totd

Haya Shulman + 2 · CVE-2022-34294 · Published 2022-08-15 · Updated 2023-08-08

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions totd version 1.5.3

Description The issue allows DNS cache poisoning due to the use of a fixed UDP source port in upstream queries sent to DNS resolvers, resulting in insufficient entropy to prevent traffic injection attacks.

Recommendations For totd version 1.5.3, consider implementing a random UDP source port for upstream queries to DNS resolvers to prevent traffic injection attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-331

Related Identifiers

CVE-2022-34294

Affected Products

Totd

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/34xxx/CVE-2022-34294.json · Exploit
• 🔥 https://openwall.com/lists/oss-security/2022/08/14/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-34294 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34294 · Vendor Advisory
• https://github.com/fwdillema/totd · Note
• https://t.me/cibsecurity/48155 · Telegram Post
• https://usenix.org/conference/usenixsecurity22/presentation/jeitner · Note
• https://blackhat.com/presentations/bh-jp-08/bh-jp-08-Kaminsky/BlackHat-Japan-08-Kaminsky-DNS08-BlackOps.pdf · Note
• https://t.me/cvenotify/34807 · Telegram Post