VDB
KO
MEDIUM

GHSA-59qp-cfj3-rp64

netfoil has a domain name filter bypass via multiple questions

Details

### Summary Potential bypass of domain name filter by crafting a DNS request with multiple questions, with the first question being legitimate.

### Impact Depends on a local attackers ability to craft multiple questions and the remote DoH server supporting them.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/tinfoil-factory/netfoil
Introduced in: 0 Fixed in: 0.3.0
Fix go get github.com/tinfoil-factory/netfoil@v0.3.0

References