Skip to content

Commit fc8bccf

Browse files
tatianabTatiana Bradley
authored andcommitted
data/reports: add alias for GO-2022-0979.yaml
Aliases: CVE-2022-3346, GHSA-87mm-qxm5-cp3f Updates #979 Fixes #1273 Change-Id: Ia84913135828239a8fd2417d0fbf34b05ff58143 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/461475 Run-TryBot: Tatiana Bradley <tatiana@golang.org> Reviewed-by: Damien Neil <dneil@google.com> Reviewed-by: Tatiana Bradley <tatiana@golang.org> TryBot-Result: Gopher Robot <gobot@golang.org>
1 parent f63fe31 commit fc8bccf

File tree

2 files changed

+4
-1
lines changed

2 files changed

+4
-1
lines changed

data/osv/GO-2022-0979.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,8 @@
33
"published": "0001-01-01T00:00:00Z",
44
"modified": "0001-01-01T00:00:00Z",
55
"aliases": [
6-
"CVE-2022-3346"
6+
"CVE-2022-3346",
7+
"GHSA-87mm-qxm5-cp3f"
78
],
89
"details": "DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records.\n\nThe owner name of RRSIG RRs is not validated, permitting an attacker to present the RRSIG for an attacker-controlled domain in a response for any other domain.",
910
"affected": [

data/reports/GO-2022-0979.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,8 @@ description: |
1111
The owner name of RRSIG RRs is not validated, permitting an attacker
1212
to present the RRSIG for an attacker-controlled domain in a response
1313
for any other domain.
14+
ghsas:
15+
- GHSA-87mm-qxm5-cp3f
1416
references:
1517
- report: https://github.com/peterzen/goresolver/issues/5
1618
cve_metadata:

0 commit comments

Comments
 (0)