Filtered by vendor Go-resolver Project
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-3347 | 1 Go-resolver Project | 1 Go-resolver | 2024-11-21 | 7.5 High |
| DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. Root DNSSEC public keys are not validated, permitting an attacker to present a self-signed root key and delegation chain. | ||||
| CVE-2022-3346 | 1 Go-resolver Project | 1 Go-resolver | 2024-11-21 | 6.5 Medium |
| DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. The owner name of RRSIG RRs is not validated, permitting an attacker to present the RRSIG for an attacker-controlled domain in a response for any other domain. | ||||
Page 1 of 1.