CVE-2025-50334

An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of service via the rate-limiting component

High · published January 8, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
64.5
In the wild
Unconfirmed
What it is

⚡ A crafty maneuver can put Technitium DNS Server on its knees! This vulnerability lets remote attackers exploit the rate-limiting feature to trigger a denial of service, making it a game-changer for availability. 🔥 Think of rate-limiting like a bouncer at a nightclub, only letting a certain number of guests in at a time. If the bouncer suddenly decides to let everyone in without checking IDs, chaos ensues, and the club becomes overcrowded and unmanageable! An attacker could flood the server with requests, overwhelming its capacity and rendering it unusable. This could lead to significant downtime, disrupting services and impacting user accessibility—it’s absolutely devastating for any organization relying on stable DNS operations.

Put simply

Think of rate-limiting like a bouncer at a nightclub, only letting a certain number of guests in at a time. If the bouncer suddenly decides to let everyone in without checking IDs, chaos ensues, and the club becomes overcrowded and unmanageable! In Technitium DNS Server v.13.5, a flaw in the rate-limiting mechanism allows attackers to bypass restrictions, causing a denial of service by overwhelming the server with excessive requests without proper throttling.

What to do

An attacker could flood the server with requests, overwhelming its capacity and rendering it unusable. This could lead to significant downtime, disrupting services and impacting user accessibility—it’s absolutely devastating for any organization relying on stable DNS operations. Immediately update Technitium DNS Server to the latest version to mitigate this vulnerability. Additionally, consider implementing more robust rate-limiting configurations and monitoring for unusual traffic patterns. You've got this! Follow these steps, and your server will be back to rock-solid performance in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01069 · 64.5th percentile
Published
2026-01-08T00:00Z
EPSS history
Timeline
  • 08 JAN 00:00Z
    An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of service via the rate-limiting component
    cvelistv5