GCVE - cpe:2.3:a:github.com/peterzen/goresolver:github.com/peterzen/goresolver:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:github.com/peterzen/goresolver:github.com/peterzen/goresolver:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Github.Com/Peterzen/Goresolver (`a5662c4c-9006-5beb-8862-61a0fbca3124`)
Product	Github.Com/Peterzen/Goresolver (`85b0eee6-c174-573a-9a38-ce80f5c879f3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-3347`	vulnerable	2026-06-08 05:48:20.624825	Incorrect validation of root DNSSEC public keys in github.com/peterzen/goresolver DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. Root DNSSEC public keys are not validated, permitting an attacker to present a self-signed root key and delegation chain. Published: 2022-12-27T21:17:52.067Z Updated: 2025-04-14T17:08:49.781Z Open on db.gcve.eu Reference links https://github.com/peterzen/goresolver/issues/5#issuecomment-1150214257 https://pkg.go.dev/vuln/GO-2022-1026	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3346`	vulnerable	2026-06-08 05:48:20.623102	Incorrect DNSSEC validation due to unchecked owner names in github.com/peterzen/goresolver DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. The owner name of RRSIG RRs is not validated, permitting an attacker to present the RRSIG for an attacker-controlled domain in a response for any other domain. Published: 2022-12-27T21:17:48.222Z Updated: 2025-04-14T17:06:12.574Z Open on db.gcve.eu Reference links https://github.com/peterzen/goresolver/issues/5 https://pkg.go.dev/vuln/GO-2022-0979	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.