Hacker News new | ask | show | jobs
by m_ram 4475 days ago
Here's the whole thing unsorted: http://pastebin.com/z7BzEnhC

and in case you want to learn about NAPTR: http://www.ietf.org/rfc/rfc2915.txt

1 comments

Regular expressions in DNS records? That sounds like it would be an easy possibility of exponential resource consumption: http://en.wikipedia.org/wiki/ReDoS

After a quick Google, it turns out some versions of ISC BIND were vulnerable to this... but I'm almost willing to bet a lot of other software that handles NAPTR could be as well.

Hopefully they use re2[1] or a similar regexp engine without backtracking.

[1]: https://code.google.com/p/re2/