3 ms·
A response from ISC: Rate Limits in BIND 9 Effective vs. DNSBomb Vulnerability (https://www.isc.org/blogs/2024-dnsbomb/ https://www.isc.org/blogs/2024-dnsbomb/
by skilled 2y ago
A response from ISC:
Rate Limits in BIND 9 Effective vs. DNSBomb Vulnerability (https://www.isc.org/blogs/2024-dnsbomb/ https://www.isc.org/blogs/2024-dnsbomb/)
> We have been researching and testing a DNS vulnerability report called the DNSBomb (CVE-2024-33655). After extensive testing, we have concluded that this technique does not pose a significant threat to BIND 9 operators.
- plagiat0r 2y agoThe response from bind is not great. Sure, one individual bind resolver may have lower amplification factor with those rate limits, but it is much more than 1x. As a consequence, 100k of such resolvers could do a burst that could saturate the victim bandwidth.