CVE Vulnerabilities

CVE-2023-49203

Insufficient Control of Network Message Volume (Network Amplification)

Published: Sep 18, 2024 | Modified: Jul 10, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a large-sized response in a burst of traffic.

Weakness

The product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the product to transmit more traffic than should be allowed for that actor.

Affected Software

Name Vendor Start Version End Version
Dnsserver Technitium 11.5.3 (including) 11.5.3 (including)

Potential Mitigations

References