Vendor/product archive

technitium / dns_server CVEs

Beta · best-effort

4 CVEs tagged to technitium / dns_server — 2 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to technitium vendor archive

CVE-2022-48256

Published Jan 13, 2023

Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-30258

Published Nov 21, 2022

An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution. A revoked domain name can still be resolvable for a lon…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-30257

Published Nov 21, 2022

An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a lon…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2021-43105

Published Mar 28, 2022

A vulnerability in the bailiwick checking function in Technitium DNS Server <= v7.0 exists that allows specific malicious users to inject `NS` records of any domain (even TLDs) in…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1