CVE Vulnerabilities

CVE-2023-49203

Insufficient Control of Network Message Volume (Network Amplification)

Published: Sep 18, 2024 | Modified: Jul 10, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a large-sized response in a burst of traffic.

Weakness

The product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the product to transmit more traffic than should be allowed for that actor.

Affected Software

NameVendorStart VersionEnd Version
DnsserverTechnitium11.5.3 (including)11.5.3 (including)

Potential Mitigations

References