CVE-2023-28451

An issue was discovered in Technitium 11.0.2. There is a vulnerability (called BadDNS) in DNS resolving software, which triggers a resolver to ignore valid responses, thus causing DoS (denial of service) for normal resolution. The effects of an exploit would be widespread and highly impactful, because the attacker could just forge a response targeting the source port of a vulnerable resolver without the need to guess the correct TXID.

• CWE-400

• https://gist.github.com/idealeer/89947ca07836fd0f7e9761198ca9a0f3.Broken Link
• https://technitium.com/dns/Product

Published

Sep 18, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28445Deno is a runtime for JavaScript and TypeScript that uses V8…9.8
• CVE-2023-28446Deno is a simple, modern and secure runtime for JavaScript a…8.8
• CVE-2023-28447Smarty is a template engine for PHP. In affected versions sm…6.1
• CVE-2023-28448Versionize is a framework for version tolerant serializion/d…7.5
• CVE-2023-2845Improper Access Control in GitHub repository cloudexplorer-d…8.1
• CVE-2023-28450An issue was discovered in Dnsmasq before 2.90. The default …7.5
• CVE-2023-28452An issue was discovered in CoreDNS through 1.10.1. There is …7.5
• CVE-2023-28455An issue was discovered in Technitium through 11.0.2. The fo…7.5
• CVE-2023-28456An issue was discovered in Technitium through 11.0.2. It ena…7.5
• CVE-2023-28457An issue was discovered in Technitium through 11.0.3. It ena…7.5
• CVE-2023-28458pretalx 2.3.1 before 2.3.2 allows path traversal in HTML exp…4.3
• CVE-2023-28459pretalx 2.3.1 before 2.3.2 allows path traversal in HTML exp…6.5