Filtered by vendor Go-resolver Project Subscriptions
Filtered by product Go-resolver Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-3347 1 Go-resolver Project 1 Go-resolver 2024-11-21 7.5 High
DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. Root DNSSEC public keys are not validated, permitting an attacker to present a self-signed root key and delegation chain.
CVE-2022-3346 1 Go-resolver Project 1 Go-resolver 2024-11-21 6.5 Medium
DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. The owner name of RRSIG RRs is not validated, permitting an attacker to present the RRSIG for an attacker-controlled domain in a response for any other domain.