# CVE-2022-30256: duende: An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution

CVE-2022-30256 is fixed in 5 products on 1 platform, first by duende 2.0.13-1.2ubuntu0.1~esm1, released May 9, 2023. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2022-30256
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0097
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Nov 18, 2022

## Description

An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | duende Ubuntu 18.04.6 LTS (bionic) | 2.0.13-1.2ubuntu0.1~esm1 | [duende 2.0.13-1.2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-duende-2.0.13-1.2ubuntu0.1-esm1.md) | May 9, 2023 |
| Linux | duende Ubuntu 20.04 LTS (focal) | 2.0.13-1.4+deb11u1build0.20.04.1 | [duende 2.0.13-1.4+deb11u1build0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-duende-2.0.13-1.4-deb11u1build0.20.04.1.md) | May 9, 2023 |
| Linux | duende Ubuntu 22.04.1 LTS (jammy) | 2.0.13-1.4+deb11u1build0.22.04.1 | [duende 2.0.13-1.4+deb11u1build0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-duende-2.0.13-1.4-deb11u1build0.22.04.1.md) | May 9, 2023 |
| Linux | maradns Debian 11.6 (bullseye) | 2.0.13-1.4+deb11u1 | [DSA-5441-1](https://patchblox.com/security/data/fix/linux/dsa-5441-1.md) | Jun 29, 2023 |
| Linux | maradns Ubuntu 18.04.6 LTS (bionic) | 2.0.13-1.2ubuntu0.1~esm1 | [maradns 2.0.13-1.2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-maradns-2.0.13-1.2ubuntu0.1-esm1.md) | May 9, 2023 |
| Linux | maradns Ubuntu 20.04 LTS (focal) | 2.0.13-1.4+deb11u1build0.20.04.1 | [maradns 2.0.13-1.4+deb11u1build0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-maradns-2.0.13-1.4-deb11u1build0.20.04.1.md) | May 9, 2023 |
| Linux | maradns Ubuntu 22.04.1 LTS (jammy) | 2.0.13-1.4+deb11u1build0.22.04.1 | [maradns 2.0.13-1.4+deb11u1build0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-maradns-2.0.13-1.4-deb11u1build0.22.04.1.md) | May 9, 2023 |
| Linux | maradns-deadwood Ubuntu 18.04.6 LTS (bionic) | 2.0.13-1.2ubuntu0.1~esm1 | [maradns-deadwood 2.0.13-1.2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-maradns-deadwood-2.0.13-1.2ubuntu0.1-esm1.md) | May 9, 2023 |
| Linux | maradns-deadwood Ubuntu 20.04 LTS (focal) | 2.0.13-1.4+deb11u1build0.20.04.1 | [maradns-deadwood 2.0.13-1.4+deb11u1build0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-maradns-deadwood-2.0.13-1.4-deb11u1build0.20.04.1.md) | May 9, 2023 |
| Linux | maradns-deadwood Ubuntu 22.04.1 LTS (jammy) | 2.0.13-1.4+deb11u1build0.22.04.1 | [maradns-deadwood 2.0.13-1.4+deb11u1build0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-maradns-deadwood-2.0.13-1.4-deb11u1build0.22.04.1.md) | May 9, 2023 |
| Linux | maradns-docs Ubuntu 18.04.6 LTS (bionic) | 2.0.13-1.2ubuntu0.1~esm1 | [maradns-docs 2.0.13-1.2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-maradns-docs-2.0.13-1.2ubuntu0.1-esm1.md) | May 9, 2023 |
| Linux | maradns-docs Ubuntu 20.04 LTS (focal) | 2.0.13-1.4+deb11u1build0.20.04.1 | [maradns-docs 2.0.13-1.4+deb11u1build0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-maradns-docs-2.0.13-1.4-deb11u1build0.20.04.1.md) | May 9, 2023 |
| Linux | maradns-docs Ubuntu 22.04.1 LTS (jammy) | 2.0.13-1.4+deb11u1build0.22.04.1 | [maradns-docs 2.0.13-1.4+deb11u1build0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-maradns-docs-2.0.13-1.4-deb11u1build0.22.04.1.md) | May 9, 2023 |
| Linux | maradns-zoneserver Ubuntu 18.04.6 LTS (bionic) | 2.0.13-1.2ubuntu0.1~esm1 | [maradns-zoneserver 2.0.13-1.2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-maradns-zoneserver-2.0.13-1.2ubuntu0.1-esm1.md) | May 9, 2023 |
| Linux | maradns-zoneserver Ubuntu 20.04 LTS (focal) | 2.0.13-1.4+deb11u1build0.20.04.1 | [maradns-zoneserver 2.0.13-1.4+deb11u1build0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-maradns-zoneserver-2.0.13-1.4-deb11u1build0.20.04.1.md) | May 9, 2023 |
| Linux | maradns-zoneserver Ubuntu 22.04.1 LTS (jammy) | 2.0.13-1.4+deb11u1build0.22.04.1 | [maradns-zoneserver 2.0.13-1.4+deb11u1build0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-maradns-zoneserver-2.0.13-1.4-deb11u1build0.22.04.1.md) | May 9, 2023 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.