CVE-2024-33655: Technitium DNS Server
High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.
The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst (which can be considered traffic amplification in some cases), aka the "DNSBomb" issue.
Affected products
- Technitium DNS Server: up to and including 1.19.3
Published 2024-06-06. Last modified 2026-06-17.