Plaintext transmission of DNS requests in Windows 1.1.1.1 WARP client
Vulnerability Description
The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, since WARP acts as local DNS server that performs DNS queries in a secure manner, however, if a user is connected to WARP over an IPv6-capable network, te WARP client did not assign loopback IPv6 addresses but Unique Local Addresses, which under certain conditions could point towards unknown devices in the same local network which enables an Attacker to view DNS queries made by the device.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-2754
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- vanhoefm
References
More from Cloudflare
View All →Affected Vendor
Cloudflare
View all reports →