x/vulndb: potential Go vuln in github.com/peterzen/goresolver: GHSA-87mm-qxm5-cp3f

[GoVulnBot]

In GitHub Security Advisory GHSA-87mm-qxm5-cp3f, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/peterzen/goresolver		<= 1.0.2

Cross references:

• CVE-2022-3346 appears in issue #979

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: TODO
    versions:
      - {}
    packages:
      - package: github.com/peterzen/goresolver
description: go-resolver's DNSSEC validation is not performed correctly. An attacker
    can cause this package to report successful validation for invalid, attacker-controlled
    records. The owner name of RRSIG RRs is not validated, permitting an attacker
    to present the RRSIG for an attacker-controlled domain in a response for any other
    domain.
cves:
  - CVE-2022-3346
ghsas:
  - GHSA-87mm-qxm5-cp3f

[tatianab]

Duplicate of https://github.com/golang/vulndb/issues/979

[gopherbot]

Change https://go.dev/cl/461475 mentions this issue: data/reports: add alias for GO-2022-0979.yaml