Vulnerability Details CVE-2022-34294
totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.5%
CVSS Severity
CVSS v3 Score 9.8
References
- https://github.com/fwdillema/totd
- https://www.blackhat.com/presentations/bh-jp-08/bh-jp-08-Kaminsky/BlackHat-Japan-08-Kaminsky-DNS08-BlackOps.pdf
- https://www.openwall.com/lists/oss-security/2022/08/14/2
- https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner
- https://github.com/fwdillema/totd
- https://www.blackhat.com/presentations/bh-jp-08/bh-jp-08-Kaminsky/BlackHat-Japan-08-Kaminsky-DNS08-BlackOps.pdf
- https://www.openwall.com/lists/oss-security/2022/08/14/2
- https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner
Products affected by CVE-2022-34294
-
cpe:2.3:a:totd_project:totd:1.5.3