Technitium DNS Server versions prior to 15.0 exhibit a vulnerability (CVE-2026-45557) related to asymmetric resource consumption. The server aggressively fetches missing DNSSEC-related records (RRSIG or DNSKEY) when they are absent or mismatched. An attacker controlling a domain can exploit this to induce the server to generate excessive network traffic, effectively causing amplification. This can degrade availability or performance of the DNS server. The vulnerability has a CVSS 3.1 base score of 5.8 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, scope changed, and availability impact only. The vendor has fixed this issue in Technitium DNS Server version 15.0. No official remediation level or patch links are provided in the source data, but the fix version is clearly stated.

The vulnerability allows an attacker controlling a domain to cause the Technitium DNS Server to generate excessive network traffic, leading to resource exhaustion or amplification effects. This impacts the availability of the DNS server but does not affect confidentiality or integrity. There are no known exploits in the wild reported at this time.

Upgrade Technitium DNS Server to version 15.0 or later, where this vulnerability is fixed. Since the vendor has released a fixed version, applying this official update is the recommended remediation. Patch status is confirmed by the vendor's versioning information. No other mitigation guidance is provided or necessary based on the available data.