Skip to content
OpenAdvisories

Package · Go

github.com/tinfoil-factory/netfoil

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium —
    GHSA-9ppr-wfw9-xvr2

    Netfoil doesn't decrement TTL

    ### Summary TTL was not decremented, so stale records would continue to be served.

    github.com/tinfoil-factory/netfoil Go
  • Medium —
    GHSA-59qp-cfj3-rp64

    netfoil has a domain name filter bypass via multiple questions

    ### Summary Potential bypass of domain name filter by crafting a DNS request with multiple questions, with the first question being legitimate. ### Impact Depends on a local attackers ability to craft multiple questions and the remote DoH server supporting th…

    github.com/tinfoil-factory/netfoil Go
  • Medium —
    GHSA-vjgj-42f6-7997

    netfoil's optional seccomp sandboxing was not applied

    ### Summary The optional flag `--filter-system-calls` was not applied even if specified. ### Details This is a defense in depth feature to apply additional seccomp filters after the binary has started. The example config also sandboxes the binary with systemd…

    github.com/tinfoil-factory/netfoil Go
  • Medium —
    GHSA-84g5-x8j3-7235

    Netfoil has incorrect allowlist enforcement

    ### Summary Rules could be bypassed by changing the first character: `example.com` could be be bypassed by e.g. `fxample.com`. ### Details Off-by-one error in the suffixtrie implementation. ### Impact The domain filter could be bypassed. Please note that DNS …

    github.com/tinfoil-factory/netfoil Go