CVE-2021-43105 : What You Need to Know

A vulnerability in the bailiwick checking function in Technitium DNS Server <= v7.0 allows specific malicious users to conduct a DNS cache poisoning attack.

Understanding CVE-2021-43105

What is CVE-2021-43105?

A vulnerability in Technitium DNS Server <= v7.0 enables malicious users to inject

NS

records into the cache, potentially leading to DNS cache poisoning.

The Impact of CVE-2021-43105

The vulnerability allows attackers to manipulate DNS records, leading to potential cache poisoning attacks.

Technical Details of CVE-2021-43105

Vulnerability Description

The flaw in the bailiwick checking function of Technitium DNS Server <= v7.0 permits the injection of

NS

records into the cache, enabling DNS cache poisoning attacks.

Affected Systems and Versions

Vendor: Technitium DNS Server
Versions affected: <= v7.0

Exploitation Mechanism

Attackers, with specific malicious intent, can inject malicious

NS

records into the DNS Server cache, potentially manipulating DNS resolutions.

Mitigation and Prevention

Immediate Steps to Take

Update Technitium DNS Server to version > v7.0 to address the vulnerability.
Monitor DNS traffic for any unusual patterns that might indicate cache poisoning attempts.

Long-Term Security Practices

Implement network segmentation to limit the impact of DNS cache poisoning attacks.
Regularly audit and review DNS configurations and records.

Patching and Updates

Apply patches and updates provided by Technitium Software to mitigate the vulnerability.