CVE-2022-30258

CRITICAL Year: 2022
CVSS v3 Score
9.8
Critical
Weakness Type
CWE-706
View all →

Vulnerability Description

An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.

Related Vulnerabilities

CVE-2019-7731

CRITICAL
CVSS:9.8(Critical)

MyWebSQL 3.7 has a remote code execution (RCE) vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename for the backup's arch...

CWE-7062019

CVE-2019-8908

CRITICAL
CVSS:9.8(Critical)

An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting -> Mailbox configuration -> Registration email template" screen, and uploading a...

CWE-7062019

CVE-2020-10574

CRITICAL
CVSS:9.8(Critical)

An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "query_logger" Admin API request, because of a typo in the JSON validation.

CWE-7062020

CVE-2020-12278

CRITICAL
CVSS:9.8(Critical)

An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles equivalent filenames that exist because of NTFS Alternate Data Streams. This may allow remote code execution ...

CWE-7062020

CVE-2020-12279

CRITICAL
CVSS:9.8(Critical)

An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles equivalent filenames that exist because of NTFS short names. This may allow remote code execution when cl...

CWE-7062020

CVE-2020-15505

CRITICAL
CVSS:9.8(Critical)

A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 a...

CWE-7062020