Vendors / Technitium Records 14 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 9
Exploited now Technitium records in CISA KEV No Technitium vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0073 · Published 2022-11-21 · No fix listed CWE-706
Priority MEDIUM 43
An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0073 · Published 2022-11-21 · No fix listed CWE-706
Priority MEDIUM 40
Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00708 · Published 2023-01-13 · No fix listed CWE-835
Priority LOW 21
A vulnerability in the bailiwick checking function in Technitium DNS Server <= v7.0 exists that allows specific malicious users to inject `NS` records of any domain (even TLDs) into the cache and conduct a DNS cache pois…
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00541 · Published 2022-03-28 · No fix listed
Open these records in search → All records by CVSS severity
2 9 3 0 0
THREATIST.IORead the docs