CVE-2022-33992

Name of the Vulnerable Software and Affected Versions DNRD (aka Domain Name Relay Daemon) version 2.20.3

Description The issue concerns the forwarding and caching of DNS queries with the CD bit set to 1, which results in the disabling of DNSSEC protection provided by upstream resolvers. This affects the security of DNS queries.

Recommendations For DNRD version 2.20.3, consider disabling the caching of DNS queries with the CD bit set to 1 until a patch is available. Restrict access to the DNS query forwarding feature to minimize the risk of exploitation. Avoid using the CD bit in DNS queries until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.