gist.github.com
https://gist.github.com/idealeer/89947ca07836fd0f7e9761198ca9a0f3 CVE-2023-28455
HIGH
Record summary
CVE-2023-28455 has a selected CVSS score of 7.5 (high).
Description
An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplification attacks and causing potential DoS.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 18, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
dns_serverBrowse technitium / dns_serverDefault status: unknown | CVE List | Through 11.0.2 | affected |
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-28455 technitium.com
https://technitium.com/dns