rfc-9267

Common Implementation Anti-Patterns Related to Domain Name System (DNS) Resource Record (RR) Processing

S. Dashevskyi, D. dos Santos, J. Wetzels, A. Amri

date2022-07 streamINDEPENDENT statusINFORMATIONAL pages16 canonicalhttps://www.rfc-editor.org/rfc/rfc9267 doi10.17487/RFC9267

This memo describes common vulnerabilities related to Domain Name System (DNS) resource record (RR) processing as seen in several DNS client implementations. These vulnerabilities may lead to successful Denial-of-Service and Remote Code Execution attacks against the affected software. Where applicable, violations of RFC 1035 are mentioned.