gist.github.com
https://gist.github.com/idealeer/89947ca07836fd0f7e9761198ca9a0f3. CVE-2023-49203
HIGH
Record summary
CVE-2023-49203 has a selected CVSS score of 7.5 (high).
Description
Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a large-sized response in a burst of traffic.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 18, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
dns_serverBrowse technitium / dns_serverDefault status: unknown | CVE List | 11.5.3 | affected |
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-49203 technitium.com
https://technitium.com/dns