CVE-2022-33993

Published: Aug 15, 2022Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Misinterpretation of special domain name characters in DNRD (aka Domain Name Relay Daemon) 2.20.3 leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form.

Affected (1)

Products: Domain Name Relay Daemon Project: Domain Name Relay Daemon

Domain Name Relay Daemon Project

1 product

Domain Name Relay Daemon

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Domain Name Relay Daemon Project Domain Name Relay Daemon	Version 2.20.3

References (8)

http://dnrd.sourceforge.net/

Source: cve@mitre.org

ProductThird Party Advisory

https://www.openwall.com/lists/oss-security/2022/08/14/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://www.usenix.org/conference/usenixsecurity21/presentation/jeitner

Source: cve@mitre.org

Third Party Advisory

https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner

Source: cve@mitre.org

Third Party Advisory

http://dnrd.sourceforge.net/

Source: af854a3a-2127-422b-91ae-364da2661108

ProductThird Party Advisory

https://www.openwall.com/lists/oss-security/2022/08/14/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://www.usenix.org/conference/usenixsecurity21/presentation/jeitner

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.