CVE-2022-30256

An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:maradns:maradns:*:*:*:*:*:*:*:*
cpe:2.3:a:maradns:maradns:*:*:*:*:*:*:*:*

History

29 Jun 2023, 12:15

Type Values Removed Values Added
References
  • (DEBIAN) https://www.debian.org/security/2023/dsa-5441 -

19 Jun 2023, 13:15

Type Values Removed Values Added
References
  • (MLIST) https://lists.debian.org/debian-lts-announce/2023/06/msg00019.html -

25 May 2023, 04:15

Type Values Removed Values Added
References
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NB7LDZM5AGWC5BHHQHW6CP5OFNBBKFOQ/ -
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3VSMLJX25MXGQ6A7UPOGK7VPUVDESPHL/ -

28 Nov 2022, 15:26

Type Values Removed Values Added
CWE CWE-672
CPE cpe:2.3:a:maradns:maradns:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
References (MISC) https://maradns.samiam.org/security.html#CVE-2022-30256 - (MISC) https://maradns.samiam.org/security.html#CVE-2022-30256 - Vendor Advisory
References (MISC) https://maradns.samiam.org/ - (MISC) https://maradns.samiam.org/ - Product, Vendor Advisory

20 Nov 2022, 02:44

Type Values Removed Values Added
New CVE

Information

Published : 2022-11-19 00:15

Updated : 2024-02-04 23:14


NVD link : CVE-2022-30256

Mitre link : CVE-2022-30256

CVE.ORG link : CVE-2022-30256


JSON object : View

Products Affected

maradns

  • maradns
CWE
CWE-672

Operation on a Resource after Expiration or Release