CVE-2023-28455

Published: Sep 18, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplification attacks and causing potential DoS.

Affected (1)

Products: Technitium: Dnsserver

Technitium

1 product

Dnsserver

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Technitium Dnsserver	Up to 11.0.2

Related CWEs

CWE-406

Insufficient Control of Network Message Volume (Network Amplification)

The product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the product to transmit more traffic than should be allowed for that actor.

References (2)

https://gist.github.com/idealeer/89947ca07836fd0f7e9761198ca9a0f3

Source: cve@mitre.org

Third Party Advisory

https://technitium.com/dns/

Source: cve@mitre.org

Product

Timeline

No history available yet.