CVE-2022-33989

dproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot time) in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://sourceforge.net/projects/dproxy/	Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/08/14/3	Exploit Mailing List Third Party Advisory
https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner	Third Party Advisory
https://sourceforge.net/projects/dproxy/	Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/08/14/3	Exploit Mailing List Third Party Advisory
https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:dproxy-nexgen_project:dproxy-nexgen:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-08-15 13:15

Updated : 2024-11-21 07:08

NVD link : CVE-2022-33989

Mitre link : CVE-2022-33989

CVE.ORG link : CVE-2022-33989

JSON object : View

Products Affected

dproxy-nexgen_project

dproxy-nexgen

CWE

CWE-331

Insufficient Entropy

{"id": "CVE-2022-33989", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2022-08-15T13:15:18.273", "references": [{"url": "https://sourceforge.net/projects/dproxy/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.openwall.com/lists/oss-security/2022/08/14/3", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://sourceforge.net/projects/dproxy/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.openwall.com/lists/oss-security/2022/08/14/3", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-331"}]}], "descriptions": [{"lang": "en", "value": "dproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot time) in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks."}, {"lang": "es", "value": "dproxy-nexgen (tambi\u00e9n se conoce como dproxy nexgen) usa un puerto de origen UDP est\u00e1tico (seleccionado aleatoriamente s\u00f3lo en el momento del arranque) en las consultas ascendentes enviadas a resolvedores de DNS. Esto permite el envenenamiento de la cach\u00e9 de DNS porque no se presenta suficiente entrop\u00eda para evitar los ataques de inyecci\u00f3n de tr\u00e1fico."}], "lastModified": "2024-11-21T07:08:43.937", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dproxy-nexgen_project:dproxy-nexgen:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "579888EE-A999-4603-97EF-740C042004B5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}