The author of dnsmasq says it has to be a PTR lookup: https://twitter.com/SimonRKelley/status/914918747978305537
That's very good news.
Edit: never mind, he says a CNAME answer to a A/AAAA query can trigger vulnerability. That's very bad news.
That's very good news.
Edit: never mind, he says a CNAME answer to a A/AAAA query can trigger vulnerability. That's very bad news.
2.76 was only released 16 months ago though. There are probably tons of router firmwares out there that are way older than that.
(And most of the devices out there will never get updated even after this, just replaced one day)