CVE-2022-30257

An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-81	Release Notes Third Party Advisory
https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-81	Release Notes Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:technitium:dns_server:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:02

Type	Values Removed	Values Added
References	~~() https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-81 - Release Notes, Third Party Advisory~~	() https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-81 - Release Notes, Third Party Advisory

Information

Published : 2022-11-21 22:15

Updated : 2024-11-21 07:02

NVD link : CVE-2022-30257

Mitre link : CVE-2022-30257

CVE.ORG link : CVE-2022-30257

JSON object : View

Products Affected

technitium

dns_server

CWE

CWE-706

Use of Incorrectly-Resolved Name or Reference

{"id": "CVE-2022-30257", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-11-21T22:15:09.773", "references": [{"url": "https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-81", "tags": ["Release Notes", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-81", "tags": ["Release Notes", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-706"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for \"Ghost\" domain names."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en Technitium DNS Server hasta 8.0.2 que permite la variante V1 de resoluci\u00f3n de nombres de dominio no deseada. Un nombre de dominio revocado a\u00fan se puede resolver durante mucho tiempo, incluidos dominios caducados y dominios maliciosos eliminados. Los efectos de un exploit ser\u00edan generalizados y de gran impacto, porque la explotaci\u00f3n se ajusta a las especificaciones y pr\u00e1cticas operativas de DNS de facto, y supera los parches de mitigaci\u00f3n actuales para los nombres de dominio \"Ghost\"."}], "lastModified": "2024-11-21T07:02:27.173", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:technitium:dns_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F68D4A2-5C6A-4A2A-97F7-722B6FC4C661", "versionEndIncluding": "8.0.2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}