PT-2025-48446 · Unknown · Technitium

CVE-2024-56089 · Published 2025-12-01 · Updated 2025-12-01

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Technitium versions through 13.2.2

Description An issue in Technitium allows attackers to conduct a DNS cache poisoning attack and inject fake responses by reviving the birthday attack.

Recommendations Update Technitium to a version later than 13.2.2.

Exploit

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2024-56089

Affected Products

Technitium

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56089.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-56089 · Security Note
• https://osv.dev/vulnerability/CVE-2024-56089 · Vendor Advisory
• https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-134 · Note
• https://technitium.com/dns · Note
• https://twitter.com/CVEnew/status/1995512666644008970 · Twitter Post