Unintended Domain Name Resolution Vulnerability in Technitium DNS Server
CVE-2022-30258

9.8CRITICAL

Key Information:

Vendor

Technitium

Status
Dns Server
Vendor
CVE Published:
21 November 2022

What is CVE-2022-30258?

A flaw in Technitium DNS Server prior to version 8.0.3 enables variant V2 of unintended domain name resolution, where revoked domain names may still resolve for extended periods. This issue poses significant risks as it allows both expired domains and previously taken-down malicious domains to remain accessible. Exploits leveraging this vulnerability can align with existing DNS specifications and protocols, thus bypassing current mitigation strategies for 'Ghost' domain names, potentially resulting in widespread operational disruptions.

References

https://github.com/TechnitiumSoftware/DnsServer/blob/mast...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.