CVE-2022-30257: 
Technitium DNS Server vulnerability analysis and mitigation

An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 9.8 CRITICAL with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. The vulnerability is classified under CWE-706 (Use of Incorrectly-Resolved Name or Reference) (NVD).

The vulnerability allows revoked domain names to remain resolvable for extended periods, which can affect expired domains and malicious domains that have been taken down. This poses significant security risks as it could allow threat actors to continue using revoked domains for malicious activities (NVD).

The vulnerability is highly exploitable as it conforms to standard DNS specifications and operational practices. It can bypass existing mitigation patches for "Ghost" domain names, making it particularly dangerous. The attack can be executed remotely without requiring any special privileges or user interaction (NVD).

The issue has been addressed in version 8.1 of Technitium DNS Server. Users are advised to upgrade to this version or later to mitigate the vulnerability (Technitium Changelog).