CVE-2022-48256

Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records.
Configurations

Configuration 1 (hide)

cpe:2.3:a:technitium:dns_server:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:33

Type Values Removed Values Added
References () https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-100 - Release Notes, Third Party Advisory () https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-100 - Release Notes, Third Party Advisory
Summary
  • (es) Technitium DNS Server anterior a 10.0 permite un ataque de denegación de servicio CNAME propio en el que un bucle CNAME provoca que una respuesta contenga cientos de registros.

Information

Published : 2023-01-13 01:15

Updated : 2024-11-21 07:33


NVD link : CVE-2022-48256

Mitre link : CVE-2022-48256

CVE.ORG link : CVE-2022-48256


JSON object : View

Products Affected

technitium

  • dns_server
CWE
CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')