Technitium

14 CVEs across 3 Technitium products. Browse Technitium vulnerabilities, severities, and proof-of-concept exploits.

Technitium products with known CVEs

ProductCVEs
Dnsserver9
DNS Server4
DNS Server1
Technitium CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-45557Medium5.82026-05-19Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable…
CVE-2026-42255High7.22026-04-26Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation.
CVE-2025-50334High7.52026-01-08An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of service via the rate-limiting component
CVE-2024-56089High7.52025-12-01An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake responses by reviving the birthday attack.
CVE-2024-56946Medium5.32025-02-03Denial of service in DNS-over-QUIC in Technitium DNS Server <= v13.2.2 allows remote attackers to permanently stop the server from accepting new DNS-over-QUIC…
CVE-2023-49203High7.52024-09-18Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes accumulation of low-ra…
CVE-2023-28457High7.52024-09-18An issue was discovered in Technitium through 11.0.3. It enables attackers to conduct a DNS cache poisoning attack and inject fake responses within 1 second, w…
CVE-2023-28456High7.52024-09-18An issue was discovered in Technitium through 11.0.2. It enables attackers to launch amplification attacks (3 times more than other "golden model" software lik…
CVE-2023-28455High7.52024-09-18An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplif…
CVE-2023-28451High7.52024-09-18An issue was discovered in Technitium 11.0.2. There is a vulnerability (called BadDNS) in DNS resolving software, which triggers a resolver to ignore valid res…
CVE-2022-48256High7.52023-01-13Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records.
CVE-2022-30258Critical9.82022-11-21An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution. A revoked domain name can still be…
CVE-2022-30257Critical9.82022-11-21An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be…
CVE-2021-43105Medium4.32022-03-28A vulnerability in the bailiwick checking function in Technitium DNS Server <= v7.0 exists that allows specific malicious users to inject `NS` records of any d…