4 ms·
Linux has a serious security problem that once again enables DNS cache poisoning
- xrayarx 5y agoQuote from the article: „The side channels affect not only Linux but also a wide range of DNS software running on top of it, including BIND, Unbound and dnsmasq. We also find about 38% of open resolvers (by frontend IPs) and 14% (by backend IPs) are vulnerable including the popular DNS services such as OpenDNS and Quad9.”
- LinuxBender 5y agoThis requires ICMP redirects to be allowed on your publicly available recursive DNS server. I could see this affecting some really small ISP DNS servers if they chose to not block ICMP redirects.