| CVE-2026-42255 | MÉDIO6.5 | Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation. | 26/04/2026 |
| CVE-2025-50334 | ALTO7.5 | An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of service via the rate-limiting component | 08/01/2026 |
| CVE-2024-56089 | ALTO7.5 | An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake responses by reviving the birthday attack. | 01/12/2025 |
| CVE-2024-56946 | MÉDIO5.3 | Denial of service in DNS-over-QUIC in Technitium DNS Server <= v13.2.2 allows remote attackers to permanently stop the server from accepting new DNS-over-QUIC connections by triggering unhandled exceptions in listener threads. | 03/02/2025 |
| CVE-2023-49203 | ALTO7.5 | Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a large-sized response in a burst of traffic. | 18/09/2024 |
| CVE-2023-28457 | ALTO7.5 | An issue was discovered in Technitium through 11.0.3. It enables attackers to conduct a DNS cache poisoning attack and inject fake responses within 1 second, which is impactful. | 18/09/2024 |
| CVE-2023-28456 | ALTO7.5 | An issue was discovered in Technitium through 11.0.2. It enables attackers to launch amplification attacks (3 times more than other "golden model" software like BIND) and cause potential DoS. | 18/09/2024 |
| CVE-2023-28455 | ALTO7.5 | An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplification attacks and causing potential DoS. | 18/09/2024 |
| CVE-2023-28451 | ALTO7.5 | An issue was discovered in Technitium 11.0.2. There is a vulnerability (called BadDNS) in DNS resolving software, which triggers a resolver to ignore valid responses, thus causing DoS (denial of service) for normal resolution. The effects of an exploit would be widespread and highly impactful, because the attacker coul | 18/09/2024 |
| CVE-2022-48256 | ALTO7.5 | Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records. | 13/01/2023 |
| CVE-2022-30258 | CRÍTICO9.8 | An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, becau | 21/11/2022 |
| CVE-2022-30257 | CRÍTICO9.8 | An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, becau | 21/11/2022 |
| CVE-2021-43105 | MÉDIO4.3 | A vulnerability in the bailiwick checking function in Technitium DNS Server <= v7.0 exists that allows specific malicious users to inject `NS` records of any domain (even TLDs) into the cache and conduct a DNS cache poisoning attack. | 28/03/2022 |