CVE-2022-3347

CVE-2022-3347 describes a critical flaw in the go_resolver_project go_resolver where DNSSEC validation is incorrectly performed. This allows an attacker to present a self-signed root key and delegation chain, leading to the acceptance of invalid, attacker-controlled DNS records as legitimate. With a CVSS score of 7.5 (High), this vulnerability is remotely exploitable with low attack complexity, enabling an attacker to achieve high integrity impact without user interaction. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.