An issue was discovered in Technitium 11.0.2.
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-400.
Summary
An issue was discovered in Technitium 11.0.2. There is a vulnerability (called BadDNS) in DNS resolving software, which triggers a resolver to ignore valid responses, thus causing DoS (denial of service) for normal resolution. The effects of an exploit would be widespread and highly impactful, because the attacker could just forge a response targeting the source port of a vulnerable resolver without the need to guess the correct TXID.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:technitium:dnsserver:11.0.2:*:*:*:*:*:*:* | 11.0.2 | Vulnerable | Technitium |
- cpe:2.3:a:technitium:dnsserver:11.0.2:*:*:*:*:*:*:* Versions 11.0.2 Vulnerable ·Technitium
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-28451
- 2026-10-03 Alias added: GHSA-3v74-rm67-6782
References
More Technitium Dnsserver vulnerabilities
- TI-2025-32106 An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of… CVSS 3.1HIGH 7.5
- TI-2023-26858 Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth… CVSS 3.1HIGH 7.5
- TI-2023-12997 An issue was discovered in Technitium through 11.0.2. CVSS 3.1HIGH 7.5
- TI-2024-37117 An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning… CVSS 3.1HIGH 7.5
- TI-2023-12996 An issue was discovered in Technitium through 11.0.2. CVSS 3.1HIGH 7.5
- TI-2023-12998 An issue was discovered in Technitium through 11.0.3. CVSS 3.1HIGH 7.5
Sources
- CVE-2023-28451 · CVE Program
- CVE-2023-28451 · NVD
- FIRST EPSS
- GHSA-3v74-rm67-6782 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences