Other nomination

Recursive DNS Resolver (DOS)

Garret Wassermann · kb.cert.org

A malicious authoritative DNS server can answer queries with an endless chain of delegations. Recursive resolvers that follow referrals without a limit, and that issue many simultaneous queries, exhaust memory and CPU until the process dies, and can be steered into flooding a chosen target with DNS traffic.

Record

Researcher

Garret Wassermann

Published by

kb.cert.org

In the archive

• Nominated for the 2014 Top 10 Web Hacking Techniques

Tags

• dos
• dns
• algorithmic-complexity
• cve
• vendor-advisory
• mitigation
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of Garret Wassermann, first published at the original source. Preserved copies are kept so the citation survives its host.