A New Variant of the SAD DNS Attack for Injecting False Data into the DNS Cache
A group of researchers from the University of California, Riverside, has published a new variant of the SAD DNS attack (CVE-2021-20322), which operates despite the protections added last year to block the vulnerability CVE-2020-25705. The new method is generally similar to last year's vulnerability, differing only in the use of a different type of ICMP packets to check active UDP ports. The proposed attack allows for the substitution of dummy data in the DNS server cache, which […]
