CVE-2022-33989

dproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot time) in upstream queries sent to DNS resolvers

published August 15, 2022

CVSS
—
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

dproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot time) in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01017 · 63.0th percentile
Published
2022-08-15T12:10Z
EPSS history
Timeline
  • 15 AUG 12:10Z
    dproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot time) in upstream queries sent to DNS resolvers
    cvelistv5