Technitium DNS Server DNS Traffic Amplification Vulnerability via Cyclic Name Server Delegation

Vulnerability

A vulnerability in Technitium DNS Server versions prior to 15.0 allows for DNS traffic amplification attacks through cyclic name server delegation. This issue can be exploited by creating a loop in DNS delegation, causing an increase in response traffic.

Impact

Exploitation of this vulnerability leads to a DNS amplification attack, where the server is tricked into sending a larger volume of traffic in response to a smaller request, potentially causing network congestion or overwhelming the server's resources.

Remediation

Users can upgrade to Technitium DNS Server version 15.0 or later, where this vulnerability has been fixed.

Added: Apr 26, 2026, 4:19 AM
Updated: Apr 26, 2026, 4:19 AM

Vulnerability Rating

Custom Algorithm
spread
3.1
impact
0.6
exploitability
7.0
remediation
7.7
relevance
6.8
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.