PT-2023-15652 · Technitium · Technitium Dns Server

Xiang Li · Publicado 2023-01-13 · Atualizado 2025-04-07 · CVE-2022-48256

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Technitium DNS Server versions prior to 10.0

Description The issue allows a self-CNAME denial-of-service attack. This occurs when a CNAME loop causes an answer to contain hundreds of records.

Recommendations For versions prior to 10.0, update to version 10.0 or later to resolve the issue.

Correção

DoS

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

CVE-2022-48256

Produtos afetados

Technitium Dns Server

Referências · 5

• https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-100 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-48256 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-48256 · Aviso do Fabricante
• https://t.me/cibsecurity/56477 · Publicação no Telegram
• https://t.me/cvenotify/118037 · Publicação no Telegram