CVE Vulnerabilities

CVE-2023-28456

Insufficient Control of Network Message Volume (Network Amplification)

Published: Sep 18, 2024 | Modified: Sep 18, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered in Technitium through 11.0.2. It enables attackers to launch amplification attacks (3 times more than other golden model software like BIND) and cause potential DoS.

Weakness

The product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the product to transmit more traffic than should be allowed for that actor.

Potential Mitigations

References