Skip to content

Commit 5f46aab

Browse files
tatianabTatiana Bradley
authored and
Tatiana Bradley
committed
data/reports: add missing ghsa to GO-2022-1026
Aliases: CVE-2022-3347, GHSA-jr65-gpj5-cw74 Updates #1026 Fixes #1207 Change-Id: I4210c82048952021bf5b6ea4dd761708e159002b Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/459840 Reviewed-by: Tim King <[email protected]> Reviewed-by: Tatiana Bradley <[email protected]> TryBot-Result: Gopher Robot <[email protected]> Run-TryBot: Tatiana Bradley <[email protected]>
1 parent d286f28 commit 5f46aab

File tree

2 files changed

+4
-1
lines changed

2 files changed

+4
-1
lines changed

data/osv/GO-2022-1026.json

+2-1
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,8 @@
33
"published": "0001-01-01T00:00:00Z",
44
"modified": "0001-01-01T00:00:00Z",
55
"aliases": [
6-
"CVE-2022-3347"
6+
"CVE-2022-3347",
7+
"GHSA-jr65-gpj5-cw74"
78
],
89
"details": "DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records.\n\nRoot DNSSEC public keys are not validated, permitting an attacker to present a self-signed root key and delegation chain.",
910
"affected": [

data/reports/GO-2022-1026.yaml

+2
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,8 @@ description: |
1010
1111
Root DNSSEC public keys are not validated, permitting an attacker
1212
to present a self-signed root key and delegation chain.
13+
ghsas:
14+
- GHSA-jr65-gpj5-cw74
1315
references:
1416
- report: https://github.com/peterzen/goresolver/issues/5#issuecomment-1150214257
1517
cve_metadata:

0 commit comments

Comments
 (0)