]> git.ipfire.org Git - thirdparty/unbound.git/commit
- Fix not following cleared RD flags potentially enables amplification
authorW.C.A. Wijngaards <wouter@nlnetlabs.nl>
Wed, 18 Jan 2023 12:18:47 +0000 (13:18 +0100)
committerW.C.A. Wijngaards <wouter@nlnetlabs.nl>
Wed, 18 Jan 2023 12:18:47 +0000 (13:18 +0100)
commitb12ab31ae36ae2b124748d37835d74dca15b161f
tree06b6e2e46b88fafa3905236177312e68fbbc34dd
parent90d42148de4fecd0db0be611a3530a0e24698772
- Fix not following cleared RD flags potentially enables amplification
  DDoS attacks, reported by Xiang Li and Wei Xu from NISL Lab,
  Tsinghua University. The fix stops query loops, by refusing to send
  RD=0 queries to a forwarder, they still get answered from cache.
doc/Changelog
iterator/iterator.c