CVE Vulnerabilities

CVE-2023-28457

Insufficient Verification of Data Authenticity

Published: Sep 18, 2024 | Modified: Apr 22, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered in Technitium through 11.0.3. It enables attackers to conduct a DNS cache poisoning attack and inject fake responses within 1 second, which is impactful.

Weakness

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Affected Software

Name Vendor Start Version End Version
Dnsserver Technitium * 11.0.3 (including)

References