CyberRota Analysis
AI-GeneratedThe vulnerability arises from the improper handling of Time-to-Live (TTL) values during slow authentication responses, potentially allowing almost expired records to be used for refreshing authoritative name server records. This could lead to outdated or invalid DNS information being utilized, which may affect the integrity of DNS resolution. Organizations relying on DNS services that experience slow authentication responses should prioritize addressing this issue to mitigate potential disruptions in service.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are used immediately if not expired and thus valid, or the records are expired, and in that case not used. So this case can only happen if almost expired records are used to refresh the authoritative NS records.