CVE-2022-33992 | BDVDB-2026-182349 Detail

Description#

DNRD (aka Domain Name Relay Daemon) 2.20.3 forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner
http://dnrd.sourceforge.net/
https://www.openwall.com/lists/oss-security/2022/08/14/1

Exploit#

No public exploit known

History#

Version 12022-08-15Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.