DNS: Pointer Pointing Beyond Data End Buffer Overflow

This protocol anomaly triggers when it detects a DNS request/reply with a pointer that points beyond the data end. This can indicate a buffer overflow or denial-of-service (DoS) attempt.

Extended Description

Detection of malformed DNS datagrams may indicate a software configuration error. It could also indicate that a malicious attempt to create a buffer-overflow condition is underway.

References

URL: http://www.groar.org/expl/beginner/understanding-bof.html http://compsec101.antibozo.net/papers/dnssec/dnssec.html

Short Name

DNS:OVERFLOW:INVALID-POINTER

Severity

Critical

Recommended

False

Recommended Action

Drop Packet

DNS: Pointer Pointing Beyond Data End Buffer Overflow

Extended Description

References

Found a potential security threat?