CVE-2022-30258: 
Technitium DNS Server vulnerability analysis and mitigation

An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains (NVD).

The vulnerability enables unintended domain name resolution where a revoked domain name remains resolvable for an extended period. The effects are widespread and highly impactful because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for 'Ghost' domain names. The vulnerability has been assigned a CVSS v3.1 Base Score of 9.8 CRITICAL with vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (NVD).

The vulnerability allows attackers to maintain the resolvability of revoked domain names, including expired domains and taken-down malicious domains. This can have significant security implications as it enables continued access to domains that should no longer be accessible, potentially facilitating malicious activities (NVD).

The vulnerability is highly exploitable as it requires no privileges or user interaction, and can be accessed over the network. The exploitation conforms to standard DNS specifications and operational practices, making it particularly effective at bypassing existing mitigations for 'Ghost' domain names (NVD).

The vulnerability was addressed in version 8.1 of Technitium DNS Server. Users should upgrade to this version or later to mitigate the issue (Release Notes).