Dproxy-Nexgen Project Dproxy-Nexgen
Approved changes feed: RSS · Atom
cpe:2.3:a:dproxy-nexgen_project:dproxy-nexgen:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Dproxy Nexgen Project (e2c9ae19-2460-5dfa-95e7-0115e09ec187) |
|---|---|
| Product | Dproxy Nexgen (687d82d2-e7d0-55b1-bf3b-9453c00910ac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/dproxy |
purl2cpe | 2026-06-01 10:12:00.673592 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-2169 |
vulnerable | 2026-06-08 06:33:30.469380 |
Implementations of UDP application protocols are susceptible to network loops and denial of service
Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.
Published: 2024-03-19T19:50:10.700Z
Updated: 2024-09-04T12:04:51.230Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33991 |
vulnerable | 2026-06-08 05:44:51.968291 |
Details available
dproxy-nexgen (aka dproxy nexgen) forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers.
Published: 2022-08-15T12:10:15.000Z
Updated: 2024-08-03T08:16:16.334Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33990 |
vulnerable | 2026-06-08 05:44:51.967887 |
Details available
Misinterpretation of special domain name characters in dproxy-nexgen (aka dproxy nexgen) leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form.
Published: 2022-08-15T12:10:15.000Z
Updated: 2024-08-03T08:16:16.186Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33989 |
vulnerable | 2026-06-08 05:44:51.967575 |
Details available
dproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot time) in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks.
Published: 2022-08-15T12:10:15.000Z
Updated: 2024-08-03T08:16:16.328Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33988 |
vulnerable | 2026-06-08 05:44:51.967180 |
Details available
dproxy-nexgen (aka dproxy nexgen) re-uses the DNS transaction id (TXID) value from client queries, which allows attackers (able to send queries to the resolver) to conduct DNS cache-poisoning attacks because the TXID value is known to the attacker.
Published: 2022-08-15T12:09:50.000Z
Updated: 2024-08-03T08:16:16.348Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.