Showing 1 - 4 of 4

CVE-2022-30698

Status Candidate

Overview

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain that updates Unbound's delegation cache. This action can be repeated before expiry of the delegation information by querying Unbound for a second level subdomain which the rogue nameserver provides new delegation information. Since Unbound is a child-centric resolver, the ever-updating child delegation information can keep a rogue domain name resolvable long after revocation. From version 1.16.2 on, Unbound checks the validity of parent delegation records before using cached delegation information.

Related Files

Gentoo Linux Security Advisory 202212-02: Posted Dec 19, 2022; Authored by Gentoo | Site security.gentoo.org; Gentoo Linux Security Advisory 202212-2 - Multiple vulnerabilities have been discovered in Unbound, the worst of which could result in denial of service. Versions less than 1.16.3 are affected.; tags | advisory, denial of service, vulnerability; systems | linux, gentoo; advisories | CVE-2022-30698, CVE-2022-30699, CVE-2022-3204; SHA-256 | bc25bbca2e03be12cd98eded3c6829b21c6e5ce8d93a049f4a2f4372c26d4986; Download | Favorite | View

Red Hat Security Advisory 2022-8062-01: Posted Nov 16, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-8062-01 - The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.; tags | advisory; systems | linux, redhat; advisories | CVE-2022-30698, CVE-2022-30699; SHA-256 | ad9465480ac5831015271d46593c2eb547ef8d26212fe261232dadc6e754d449; Download | Favorite | View

Red Hat Security Advisory 2022-7622-01: Posted Nov 8, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-7622-01 - The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.; tags | advisory; systems | linux, redhat; advisories | CVE-2022-30698, CVE-2022-30699; SHA-256 | 17bb905be48b007a9b72bda11e1d45d88c2fc589df036c97031af96792657c31; Download | Favorite | View

Ubuntu Security Notice USN-5569-1: Posted Aug 16, 2022; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 5569-1 - Xiang Li discovered that Unbound incorrectly handled delegation caching. A remote attacker could use this issue to keep rogue domain names resolvable long after they have been revoked.; tags | advisory, remote; systems | linux, ubuntu; advisories | CVE-2022-30698; SHA-256 | 4fc02ce3970553ff9b60bbcacacd72056e2d68b7898f270de8d67785a55ece74; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 249 files
Jay Turla 150 files
indoushka 147 files
Ubuntu 62 files
h00die 54 files
juan vazquez 43 files
sinn3r 41 files
H D Moore 31 files
Karn Ganeshen 23 files
Pedro Ribeiro 22 files

File Archives

Systems

AIX (430)
Apple (2,104)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,118)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,567)
HPUX (881)
iOS (387)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (51,071)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (489)
RedHat (16,733)
Slackware (941)
Solaris (1,615)
SUSE (1,444)
Ubuntu (9,808)
UNIX (9,452)
UnixWare (188)
Windows (6,763)
Other

CVE-2022-30698

Overview

Related Files

File Archive:

September 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems