PT-2022-20037 · Unknown+2 · Maradns Deadwood+2

Xiang Li · Published 2022-11-18 · Updated 2025-04-29 · CVE-2022-30256

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions MaraDNS Deadwood versions 3.5.0021 and earlier

Description An issue in MaraDNS Deadwood allows variant V1 of unintended domain name resolution. This means a revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful because it conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.

Recommendations For MaraDNS Deadwood versions 3.5.0021 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-672

Related Identifiers

CVE-2022-30256

DLA-3457-1

DSA-5441-1

USN-6271-1

Affected Products

Linuxmint

Maradns Deadwood

Ubuntu

References · 20

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3VSMLJX25MXGQ6A7UPOGK7VPUVDESPHL · Vendor Advisory
• https://maradns.samiam.org/security.html#CVE-2022-30256 · Vendor Advisory
• https://maradns.samiam.org · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3457-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-31137 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-30256 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-30256 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-30256 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-30256 · Security Note
• https://osv.dev/vulnerability/DSA-5441-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6271-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-30256 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-30256 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NB7LDZM5AGWC5BHHQHW6CP5OFNBBKFOQ · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30256 · Security Note