CVE-2022-33988 describes a DNS cache-poisoning vulnerability in dproxy-nexgen, where the software reuses DNS transaction IDs from client queries. This flaw allows attackers to conduct cache-poisoning attacks by leveraging the predictable TXID values. Rated 7.5 HIGH, the vulnerability has a network attack vector, low attack complexity, and high impact on integrity, but is not currently known to be actively exploited, lacks public exploit code, and has received minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:dproxy-nexgen_project:dproxy-nexgen:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.