Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2022-30256

EPSS 0.86% · P75
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-30256

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
MaraDNS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MaraDNS是Sam Trenholme个人开发者的一种开源域名系统实现,可以用作缓存,递归或权威名称服务器。 MaraDNS 3.5.0021版本存在安全漏洞,该漏洞源于允许意外域名解析的变体V1,被撤销的域名在很长一段时间内仍然可以解析,包括过期域名和被下架的恶意域名。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2022-30256

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-30256

登录查看更多情报信息。

Same Patch Batch · n/a · 2022-11-18 · 23 CVEs total

CVE-2022-451635.3 MEDIUMNXP Semiconductors i.MX SoC 安全漏洞
CVE-2022-44378Automotive Shop Management System SQL注入漏洞
CVE-2022-45474drachtio-server 资源管理错误漏洞
CVE-2022-45473drachtio-server 安全漏洞
CVE-2022-45132LAVA 代码注入漏洞
CVE-2022-44820Automotive Shop Management System SQL注入漏洞
CVE-2022-44641LAVA 安全漏洞
CVE-2022-44415Automotive Shop Management System SQL注入漏洞
CVE-2022-44414Automotive Shop Management System SQL注入漏洞
CVE-2022-44413Automotive Shop Management System SQL注入漏洞
CVE-2022-44379Automotive Shop Management System SQL注入漏洞
CVE-2021-31739SEPPmail 跨站脚本漏洞
CVE-2022-44204D-Link DIR-3060 安全漏洞
CVE-2022-43673Wire 日志信息泄露漏洞
CVE-2022-43308Intelbras SG 2404 MR 安全漏洞
CVE-2022-42904ZOHO ManageEngine ADManager Plus 安全漏洞
CVE-2022-4055xdg-utils 安全漏洞
CVE-2022-38871free5GC 资源管理错误漏洞
CVE-2022-37197IOBit IOTransfer 代码问题漏洞
CVE-2022-34827Carel Boss Mini 安全漏洞

Showing top 20 of 23 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2022-30256

No comments yet


Leave a comment