CVE-2023-28456

Published: Sep 18, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue was discovered in Technitium through 11.0.2. It enables attackers to launch amplification attacks (3 times more than other "golden model" software like BIND) and cause potential DoS.

Affected (1)

Products: Technitium: Dnsserver

Technitium

1 product

Dnsserver

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Technitium Dnsserver	Up to 11.0.2

Related CWEs

CWE-406

Insufficient Control of Network Message Volume (Network Amplification)

The product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the product to transmit more traffic than should be allowed for that actor.

References (2)

https://gist.github.com/idealeer/89947ca07836fd0f7e9761198ca9a0f3

Source: cve@mitre.org

Third Party Advisory

https://technitium.com/dns/

Source: cve@mitre.org

Product

Timeline

No history available yet.