Technitium DNS Server DNS Cache Poisoning Vulnerability

A DNS cache poisoning vulnerability has been identified in Technitium DNS Server versions prior to 14.2.2. This vulnerability allows attackers to inject false DNS responses, exploiting the server's handling of IP fragmentation. The issue arises from missing bailiwick validations for NS records in referral responses, which can be manipulated to conduct a cache poisoning attack.

Impact

Exploitation of this vulnerability allows for DNS cache poisoning, where false DNS responses can be injected and cached by the DNS server. This can lead to clients being misdirected to malicious or unintended destinations.

Remediation

Users can upgrade to Technitium DNS Server version 14.2.2 or later, where this vulnerability has been fixed.