What’s Vulnerable › Vulnerabilities

CVE-2024-56946

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-03 · updated 2026-06-17
• Weakness: CWE-248

Description

Denial of service in DNS-over-QUIC in Technitium DNS Server <= v13.2.2 allows remote attackers to permanently stop the server from accepting new DNS-over-QUIC connections by triggering unhandled exceptions in listener threads.

Affected products

• Technitium DnsServer: before 13.3 — fixed in 13.3

How to fix

Upgrade to a fixed version: Technitium DnsServer 13.3. Check the vendor advisory for mitigations.

References

• https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-133
• https://github.com/TechnitiumSoftware/DnsServer/commit/a7d1cfb6e836798ef9171677bf8919cf99d9dcb0

Get alerted when CVE-2024-56946 or the next vulnerability affects your stack