5 ms·
Here's the whole thing unsorted: http://pastebin.com/z7BzEnhC http://pastebin.com/z7BzEnhC and in case you want to learn about NAPTR: http://www.ietf.org/rfc/r
by m_ram 13y ago
Here's the whole thing unsorted: http://pastebin.com/z7BzEnhC http://pastebin.com/z7BzEnhC
and in case you want to learn about NAPTR: http://www.ietf.org/rfc/rfc2915.txt http://www.ietf.org/rfc/rfc2915.txt
- userbinator 13y agoRegular expressions in DNS records? That sounds like it would be an easy possibility of exponential resource consumption: http://en.wikipedia.org/wiki/ReDoS http://en.wikipedia.org/wiki/ReDoS After a quick Google, it turns out some versions of ISC BIND were vulnerable to this... but I'm almost willing to bet a lot of other software that handles NAPTR could be as well.
- sleepydog 13y agoHopefully they use re2[1] or a similar regexp engine without backtracking. [1]: https://code.google.com/p/re2/ https://code.google.com/p/re2/