CVE catalog

CVE-2022-30256

UBUNTU-

[CVE catalog]

An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.

Severity
Critical · CVSS 9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.97% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Ubuntupromaradns2.0.13-1.2UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Ubuntupromaradns2.0.13-1.2ubuntu0.1~esm1UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Ubuntu22.04maradns2.0.13-1.4+deb11u1build0.22.04.1UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Ubuntu22.04maradns2.0.13-1.4build2UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Ubuntu20.04maradns2.0.13-1.2build1UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Ubuntu20.04maradns2.0.13-1.4UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Ubuntu20.04maradns2.0.13-1.4+deb11u1build0.20.04.1UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Ubuntu20.04maradns2.0.13-1.4build1UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Debian11maradns2.0.13-1.4UnknownSource applicability is not established[DEBIAN-CVE-2022-30256][DSA-5441-1]
Debian11maradns2.0.13-1.4+deb11u1UnknownSource applicability is not established[DEBIAN-CVE-2022-30256][DSA-5441-1]
Debian10maradns2.0.13-1.2UnknownSource applicability is not established[DLA-3457-1]
Debian10maradns2.0.13-1.2+deb10u1UnknownSource applicability is not established[DLA-3457-1]
Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Debian10maradns2.0.13-1.2UnknownSource applicability is not established[DLA-3457-1]
Debian10maradns2.0.13-1.2+deb10u1UnknownSource applicability is not established[DLA-3457-1]
Debian11maradns2.0.13-1.4UnknownSource applicability is not established[DEBIAN-CVE-2022-30256][DSA-5441-1]
Debian11maradns2.0.13-1.4+deb11u1UnknownSource applicability is not established[DEBIAN-CVE-2022-30256][DSA-5441-1]
Ubuntu20.04maradns2.0.13-1.2build1UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Ubuntu20.04maradns2.0.13-1.4UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Ubuntu20.04maradns2.0.13-1.4+deb11u1build0.20.04.1UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Ubuntu20.04maradns2.0.13-1.4build1UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Ubuntu22.04maradns2.0.13-1.4+deb11u1build0.22.04.1UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Ubuntu22.04maradns2.0.13-1.4build2UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Ubuntupromaradns2.0.13-1.2UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Ubuntupromaradns2.0.13-1.2ubuntu0.1~esm1UnknownSource applicability is not established[USN-6271-1][UBUNTU-CVE-2022-30256]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "maradns",
      "distro": "debian",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.13-1.4+deb11u1"
            }
          ]
        }
      ],
      "release": "11",
      "versions": [
        "2.0.13-1.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/DEBIAN-CVE-2022-30256",
      "fixed_version": "2.0.13-1.4+deb11u1",
      "provider_source": "pypi",
      "provider_record_id": "DEBIAN-CVE-2022-30256",
      "provider_updated_at": "2026-08-27T23:04:21.418573978Z",
      "applicability_unknown": true
    },
    {
      "name": "maradns",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.13-1.2ubuntu0.1~esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2.0.13-1.2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-6271-1",
      "fixed_version": "2.0.13-1.2ubuntu0.1~esm1",
      "provider_source": "pypi",
      "provider_record_id": "USN-6271-1",
      "provider_updated_at": "2026-06-25T13:32:14.338302401Z",
      "applicability_unknown": true
    },
    {
      "name": "maradns",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.13-1.4+deb11u1build0.20.04.1"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "2.0.13-1.2build1",
        "2.0.13-1.4",
        "2.0.13-1.4build1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-6271-1",
      "fixed_version": "2.0.13-1.4+deb11u1build0.20.04.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-6271-1",
      "provider_updated_at": "2026-06-25T13:32:14.338302401Z",
      "applicability_unknown": true
    },
    {
      "name": "maradns",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.13-1.4+deb11u1build0.22.04.1"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "2.0.13-1.4build2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-6271-1",
      "fixed_version": "2.0.13-1.4+deb11u1build0.22.04.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-6271-1",
      "provider_updated_at": "2026-06-25T13:32:14.338302401Z",
      "applicability_unknown": true
    },
    {
      "name": "maradns",
      "distro": "debian",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.13-1.4+deb11u1"
            }
          ]
        }
      ],
      "release": "11",
      "versions": [
        "2.0.13-1.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/DSA-5441-1",
      "fixed_version": "2.0.13-1.4+deb11u1",
      "provider_source": "pypi",
      "provider_record_id": "DSA-5441-1",
      "provider_updated_at": "2026-03-09T02:08:40.190626Z",
      "applicability_unknown": true
    },
    {
      "name": "maradns",
      "distro": "debian",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.13-1.2+deb10u1"
            }
          ]
        }
      ],
      "release": "10",
      "versions": [
        "2.0.13-1.2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/DLA-3457-1",
      "fixed_version": "2.0.13-1.2+deb10u1",
      "provider_source": "pypi",
      "provider_record_id": "DLA-3457-1",
      "provider_updated_at": "2026-03-09T01:19:02.374002Z",
      "applicability_unknown": true
    },
    {
      "name": "maradns",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.13-1.2ubuntu0.1~esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2.0.13-1.2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-30256",
      "fixed_version": "2.0.13-1.2ubuntu0.1~esm1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-30256",
      "provider_updated_at": "2026-02-04T03:20:53.140412Z",
      "applicability_unknown": true
    },
    {
      "name": "maradns",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.13-1.4+deb11u1build0.20.04.1"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "2.0.13-1.2build1",
        "2.0.13-1.4",
        "2.0.13-1.4build1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-30256",
      "fixed_version": "2.0.13-1.4+deb11u1build0.20.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-30256",
      "provider_updated_at": "2026-02-04T03:20:53.140412Z",
      "applicability_unknown": true
    },
    {
      "name": "maradns",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.13-1.4+deb11u1build0.22.04.1"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "2.0.13-1.4build2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-30256",
      "fixed_version": "2.0.13-1.4+deb11u1build0.22.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-30256",
      "provider_updated_at": "2026-02-04T03:20:53.140412Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]