CVE-2022-30256

maradns

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-30256

Katalog CVE

CVSS 7.5 · High EPSS 0,96%

Kerentanan Operation on a Resource after Expiration or Release pada maradns. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.

Rincian

Terbit di NVD
19 November 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-672: Operation on a Resource after Expiration or Release
EPSS (30 hari)
0,96% peluang dieksploitasi; lebih tinggi dari 60,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
maradns maradns Semua versi sebelum 3.4.03
maradns maradns Versi 3.5.0 hingga sebelum 3.5.0022

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.