An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Maradns |
|
Configuration 1 [-]
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 Debian DLA |
DLA-3457-1 | maradns security update |
 Debian DSA |
DSA-5441-1 | maradns security update |
 EUVD |
EUVD-2022-35461 | An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names. |
 Ubuntu USN |
USN-6271-1 | MaraDNS vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 29 Apr 2025 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-04-29T14:40:33.438Z
Reserved: 2022-05-04T00:00:00.000Z
Link: CVE-2022-30256
Vulnrichment
Updated: 2024-08-03T06:40:47.864Z
NVD
Status : Modified
Published: 2022-11-19T00:15:10.497
Modified: 2025-04-29T15:15:47.353
Link: CVE-2022-30256
Redhat
No data.
OpenCVE Enrichment
No data.