This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/dns-wg@ripe.net/

[dns-wg] New on RIPE Labs: NXNSAttack: Upgrade Resolvers to Stop New Kind of Random Subdomain Attack

• Previous message (by thread): [dns-wg] New on RIPE Labs: The BGP Tuner: Intuitive Anycast Management
• Next message (by thread): [dns-wg] New on RIPE Labs: NXNSAttack: Upgrade Resolvers to Stop New Kind of Random Subdomain Attack

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Mirjam Kuehne mir at ripe.net
Wed May 20 16:43:18 CEST 2020

Dear colleagues,

This article by Petr Špaček of CZ.NIC describes a newly discovered DNS
protocol vulnerability that affects all recursive DNS resolvers.
NXNSAttack allows the execution of random subdomain attacks using the
DNS delegation mechanism, resulting in a big packet amplification factor.

Please read more about this on RIPE Labs:

https://labs.ripe.net/Members/petr_spacek/nxnsattack-upgrade-resolvers-to-stop-new-kind-of-random-subdomain-attack

Kind regards,
Mirjam Kühne
RIPE NCC

• Previous message (by thread): [dns-wg] New on RIPE Labs: The BGP Tuner: Intuitive Anycast Management
• Next message (by thread): [dns-wg] New on RIPE Labs: NXNSAttack: Upgrade Resolvers to Stop New Kind of Random Subdomain Attack

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

[ dns-wg Archives ]