CVE-2023-2754
The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, since WARP acts as local DNS server that performs DNS queries in a secure manner, however, if a user is connected to WARP over an IPv6-capable network, te WARP…
Does this matter?
Lower severity and a low EPSS score (0.92%). Track it; it rarely justifies an emergency change on its own.
Description
The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, since WARP acts as local DNS server that performs DNS queries in a secure manner, however, if a user is connected to WARP over an IPv6-capable network, te WARP client did not assign loopback IPv6 addresses but Unique Local Addresses, which under certain conditions could point towards unknown devices in the same local network which enables an Attacker to view DNS queries made by the device.
- CVSS 3.1
- 6.8 MEDIUMCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- EPSS
- 0.92% probability · 58th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-319
- Affected
- cloudflare/warp
- Source
- cna@cloudflare.com
References
- https://developers.cloudflare.com/warp-client/Product
- https://github.com/cloudflare/advisories/security/advisories/GHSA-mv6g-7577-vq4wVendor Advisory
- https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/releaseRelease Notes
- https://developers.cloudflare.com/warp-client/Product
- https://github.com/cloudflare/advisories/security/advisories/GHSA-mv6g-7577-vq4wVendor Advisory
- https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/releaseRelease Notes
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.