CVE-2022-3346

DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. The owner name of RRSIG RRs is not validated, permitting an attacker to present the RRSIG for an attacker-controlled domain in a response for any other domain.

• CWE-345

• https://github.com/peterzen/goresolver/issues/5Issue Tracking, Third Party Advisory
• https://pkg.go.dev/vuln/GO-2022-0979Vendor Advisory
• https://github.com/peterzen/goresolver/issues/5Issue Tracking, Third Party Advisory
• https://pkg.go.dev/vuln/GO-2022-0979Vendor Advisory

Published

Dec 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3339A reflected cross-site scripting (XSS) vulnerability in ePO …6.1
• CVE-2022-3340XML External Entity (XXE) vulnerability in Trellix IPS Manag…7.2
• CVE-2022-3341A null pointer dereference issue was discovered in 'FFmpeg' …5.3
• CVE-2022-3342The Jetpack CRM plugin for WordPress is vulnerable to PHAR d…8.8
• CVE-2022-3343The WPQA Builder WordPress plugin before 5.9.3 (which is a c…3.5
• CVE-2022-3344A flaw was found in the KVM's AMD nested virtualization (SVM…5.5
• CVE-2022-3347DNSSEC validation is not performed correctly. An attacker ca…7.5
• CVE-2022-3348Just like in the previous report, an attacker could steal th…4.9
• CVE-2022-3349A vulnerability was found in Sony PS4 and PS5. It has been c…6.8
• CVE-2022-3350The Contact Bank WordPress plugin through 3.0.30 does not sa…4.8
• CVE-2022-3351An issue has been discovered in GitLab EE affecting all vers…4.3
• CVE-2022-3352Use After Free in GitHub repository vim/vim prior to 9.0.061…7.8