Ghost Domain Reloaded: Vulnerable Links in Domain Name Delegation and Revocation
Overview
In this paper, we propose Phoenix Domain, a general and novel attack that allows adversaries to maintain the revoked malicious domain continuously resolvable at scale, which enables an old, mitigated attack, Ghost Domain.
Phoenix Domain: https://phoenixdomain.net/
CVE. (9)
-
Knot Resolver: CVE-2022-30250 CVE-2022-30251
-
PowerDNS Recursor: CVE-2022-30252
-
Simple DNS Plus: CVE-2022-30254