CVE-2024-33655

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst (which can be considered traffic amplification in some cases), aka the "DNSBomb" issue.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

VendorProductVersions
n/an/an/a
technitiumdns_server<= 1.19.3

References

Timeline

Published
Jun 6, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-336567.8The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privileCVE-2024-336577.8This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak iCVE-2024-336587.8APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory BuffCVE-2024-336598.8AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitCVE-2024-33669.8A vulnerability classified as problematic was found in Xuxueli xxl-job up to 2.4.1. This vulnerability affects the function deserialize of tCVE-2024-336604.3An exploit is possible where an actor with physical access can manipulate SPI flash without being detected.CVE-2024-336619.1Portainer before 2.20.0 allows redirects when the target is not index.yaml.CVE-2024-336627.5Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function.CVE-2024-336636.5python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.CVE-2024-336645.3python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web EncrypCVE-2024-336656.1angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that thereCVE-2024-336668.6An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket could have accessed time accounting details of this t
CVE-2024-33655: High severity, CVSS 7.5 | Vulnix