CVE-2026-45557
DNSSEC Misconfiguration Leading to Excessive Traffic in Technitium DNS Server
Publication date: 2026-05-19
Last updated on: 2026-05-19
Assigner: Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| technitium | dns_server | 15.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-406 | The product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the product to transmit more traffic than should be allowed for that actor. |
| CWE-405 | The product does not properly control situations in which an adversary can cause the product to consume or produce excessive resources without requiring the adversary to invest equivalent work or otherwise prove authorization, i.e., the adversary's influence is "asymmetric." |
| CWE-770 | The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in Technitium DNS Server, where the server aggressively attempts to fetch missing RRSIG records or mismatched DNSKEY records.
An attacker who controls a domain can exploit this behavior to cause the vulnerable system to generate excessive network traffic.
This issue was fixed in version 15.0 of the software.
How can this vulnerability impact me? :
The vulnerability can lead to a denial of service condition by causing the affected DNS server to generate excessive network traffic.
This excessive traffic can degrade the performance of the DNS server and potentially impact network resources.
What immediate steps should I take to mitigate this vulnerability?
The vulnerability is fixed in Technitium DNS Server version 15.0.
To mitigate this vulnerability, you should upgrade your Technitium DNS Server to version 15.0 or later.