medium6.5
CVE-2022-3346
DNSSEC validation is not performed correctly.
Impact
DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. The owner name of RRSIG RRs is not validated, permitting an attacker to present the RRSIG for an attacker-controlled domain in a response for any other domain.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Go-Resolver Project | Go-Resolver | All versions |