Vendors / Technitium Records 14 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 9
Exploited now Technitium records in CISA KEV No Technitium vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0073 · Published 2022-11-21 · No fix listed CWE-706
Priority MEDIUM 43
An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0073 · Published 2022-11-21 · No fix listed CWE-706
Priority MEDIUM 41
An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of service via the rate-limiting component
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01069 · Published 2026-01-08 · No fix listed CWE-770
Priority MEDIUM 40
Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a large-sized response in a…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00648 · Published 2024-09-18 · No fix listed CWE-406
Priority MEDIUM 40
An issue was discovered in Technitium through 11.0.2.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00543 · Published 2024-09-18 · No fix listed CWE-406
Priority MEDIUM 40
Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00708 · Published 2023-01-13 · No fix listed CWE-835
Priority LOW 39
An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake responses by reviving the birthday attack.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00343 · Published 2025-12-01 · No fix listed CWE-330
Priority LOW 39
An issue was discovered in Technitium through 11.0.2.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0053 · Published 2024-09-18 · No fix listed CWE-406
Priority LOW 39
An issue was discovered in Technitium 11.0.2.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0053 · Published 2024-09-18 · No fix listed CWE-400
Priority LOW 38
An issue was discovered in Technitium through 11.0.3.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00211 · Published 2024-09-18 · No fix listed CWE-345
Priority LOW 37
Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation.
CVSS 3.1 HIGH 7.2· Network · No auth · No interaction · EPSS 0.00207 · Published 2026-04-26 · Fixed in 15.0.0 CWE-684
Priority LOW 31
Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00389 · Published 2026-05-19 · Fixed in 15.0 CWE-405
Priority LOW 30
Denial of service in DNS-over-QUIC in Technitium DNS Server <= v13.2.2 allows remote attackers to permanently stop the server from accepting new DNS-over-QUIC connections by triggering unhandled exceptions in listener th…
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00445 · Published 2025-02-03 · No fix listed CWE-248
Priority LOW 21
A vulnerability in the bailiwick checking function in Technitium DNS Server <= v7.0 exists that allows specific malicious users to inject `NS` records of any domain (even TLDs) into the cache and conduct a DNS cache pois…
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00541 · Published 2022-03-28 · No fix listed
Open these records in search → All records by CVSS severity
2 9 3 0 0
THREATIST.IORead the docs