MediumCVSS 6.5
EPSS 0.21%
Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation.
Product
technitium dnsserver vulnerabilities
9 published CVES affecting technitium dnsserver, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 9
- Critical
- 0
- High
- 7
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest technitium dnsserver CVEs
Newest publication first
-
-
HighCVSS 7.5 EPSS 1.1%
An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of service via the rate-limiting component
-
HighCVSS 7.5 EPSS 0.34%
An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake responses by reviving the birthday attack.
-
MediumCVSS 5.3 EPSS 0.46%
Denial of service in DNS-over-QUIC in Technitium DNS Server <= v13.2.2 allows remote attackers to permanently stop the server from accepting new DNS-over-QUIC connections by triggering unhandled exceptions in listener threads.
-
HighCVSS 7.5 EPSS 0.54%
An issue was discovered in Technitium through 11.0.2. It enables attackers to launch amplification attacks (3 times more than other "golden model" software like BIND) and cause potential DoS.
-
HighCVSS 7.5 EPSS 0.53%
An issue was discovered in Technitium 11.0.2. There is a vulnerability (called BadDNS) in DNS resolving software, which triggers a resolver to ignore valid responses, thus causing DoS (denial of service) for normal resolution. The effects of an exploit would be widespread and hig...
-
HighCVSS 7.5 EPSS 0.21%
An issue was discovered in Technitium through 11.0.3. It enables attackers to conduct a DNS cache poisoning attack and inject fake responses within 1 second, which is impactful.
-
HighCVSS 7.5 EPSS 0.53%
An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplification attacks and causing potential DoS.
-
HighCVSS 7.5 EPSS 0.65%
Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a large-sized response in a burst of traffic.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.