DNSBomb – pulsing DoS attack exploiting DNS queries and responses

lixiang521.com

3 pointsskilled2 comments

A response from ISC:

Rate Limits in BIND 9 Effective vs. DNSBomb Vulnerability (https://www.isc.org/blogs/2024-dnsbomb/)

> We have been researching and testing a DNS vulnerability report called the DNSBomb (CVE-2024-33655). After extensive testing, we have concluded that this technique does not pose a significant threat to BIND 9 operators.

The response from bind is not great. Sure, one individual bind resolver may have lower amplification factor with those rate limits, but it is much more than 1x. As a consequence, 100k of such resolvers could do a burst that could saturate the victim bandwidth.

Reply on news.ycombinator.com