dns cache poisoning

  1. Unbound CVE-2025-11411 Patch: Stop DNS Delegation Poisoning

    NLnet Labs has released an emergency patch for Unbound after researchers disclosed CVE-2025-11411, a cache‑poisoning class vulnerability that lets crafted responses carrying promiscuous NS resource record sets (RRSets) in the DNS authority section trick resolvers into updating delegation data —...
  2. Windows DNS Cache Poisoning Mitigation: Set MaximumUdpPacketSize to 1221 (ADV200013)

    Microsoft has updated guidance in its Security Update Guide advisory ADV200013 — the advisory that covers DNS resolver spoofing and cache‑poisoning attacks — and is explicitly telling administrators that in addition to older server builds the mitigation applies to newer releases such as Windows...