Signature Detail

DNS: Pointer Pointing Beyond Data End Buffer Overflow

This protocol anomaly triggers when it detects a DNS request/reply with a pointer that points beyond the data end. This can indicate a buffer overflow or denial-of-service (DoS) attempt.

Extended Description

Detection of malformed DNS datagrams may indicate a software configuration error. It could also indicate that a malicious attempt to create a buffer-overflow condition is underway.

References

• URL: http://www.groar.org/expl/beginner/understanding-bof.html
• URL: http://compsec101.antibozo.net/papers/dnssec/dnssec.html