Denial of Service Vulnerability in Technitium DNS Resolvers

CVE-2023-28455

What is CVE-2023-28455?

A vulnerability in the Technitium DNS Server, specifically in the forwarding mode, has been identified that enables malicious actors to craft a query loop. This can lead to amplification attacks, resulting in significant service interruptions and potential denial of service situations. The issue primarily impacts versions up to 11.0.2 and poses a serious threat to the integrity and availability of DNS services. Organizations using affected versions should assess their systems for susceptibility and consider remediation strategies to prevent exploitation.

References