CVE-2022-32983: Medium severity nic Knot Resolver vulnerability
Published Jun 20, 2022
·Updated
Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters.
Affected Software
5 affected components
nic Knot Resolver<=5.5.1
debian/knot-resolver*
debian/knot-resolver*
debian/knot-resolver*
debian/knot-resolver<=5.6.0-1+deb12u1, <=5.7.5-1, <=6.5.0-2
Event History
Jun 20, 2022
CVE Published
via MITRE·03:05 PM
Data Sourced
via MITRE·03:05 PM
Description
Data Sourced
via OSV·04:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2022-32983?
CVE-2022-32983 is a vulnerability in Knot Resolver version through 5.5.1 that may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters.
2
How severe is CVE-2022-32983?
CVE-2022-32983 has a severity level of medium, with a severity value of 5.3.
3
How can I fix CVE-2022-32983?
To fix CVE-2022-32983, upgrade to Knot Resolver version 5.5.2 or higher.
4
Where can I find more information about CVE-2022-32983?
You can find more information about CVE-2022-32983 in the official documentation for Knot Resolver.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-32983?
The Common Weakness Enumeration (CWE) ID for CVE-2022-32983 is CWE-290.