go-resolver Project go-resolver for Go

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:go-resolver_project:go-resolver:-:*:*:*:*:go:*:*

part: a version: - update: *

VendorGo Resolver Project (7f01d3fd-7c22-59dd-9558-50ca8cbeb694)
ProductGo Resolver (a0f6bcf6-ee9d-5113-ae83-421e461f2d82)
Edition*
Language*
Software edition*
Target softwarego
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/peterzen/goresolver purl2cpe 2026-06-01 10:16:33.978078

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3347 vulnerable 2026-06-08 05:48:20.624934 Incorrect validation of root DNSSEC public keys in github.com/peterzen/goresolver
DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. Root DNSSEC public keys are not validated, permitting an attacker to present a self-signed root key and delegation chain.
Published: 2022-12-27T21:17:52.067Z
Updated: 2025-04-14T17:08:49.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3346 vulnerable 2026-06-08 05:48:20.624032 Incorrect DNSSEC validation due to unchecked owner names in github.com/peterzen/goresolver
DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. The owner name of RRSIG RRs is not validated, permitting an attacker to present the RRSIG for an attacker-controlled domain in a response for any other domain.
Published: 2022-12-27T21:17:48.222Z
Updated: 2025-04-14T17:06:12.574Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.