[lacnog] NXNSAttack: Upgrade Resolvers to Stop New Kind of Random Subdomain Attack

[Lucimara Desiderá]

NXNSAttack: Upgrade Resolvers to Stop New Kind of Random Subdomain Attack

Petr Špaček — 20 May 2020

This article describes a newly discovered DNS protocol vulnerability
that affects most recursive DNS resolvers. NXNSAttack allows the
execution of random subdomain attacks using the DNS delegation
mechanism, resulting in a big packet amplification factor.


https://labs.ripe.net/Members/petr_spacek/nxnsattack-upgrade-resolvers-to-stop-new-kind-of-random-subdomain-attack