NAME:WRECK DNS vulnerabilities affect over 100 million devices

https://www.bleepingcomputer.com/ne...nerabilities-affect-over-100-million-devices/

 

I wonder if DNS platforms like Quad9 have any impact on vulnerabilities like NAME:WRECK?

 

One of mitigations propose to " - Configure devices to rely on internal DNS servers". So it seems that DNS server can at least minimize attack surface (by not trying to exploit vulnerable devices?). Patching clients is IMO still better to rely on.

 

Probably some clients (IoT devices? out-of-support smartTVs, smart laundry machines) will not be patched by vendor, so you must find other way to protect them.

 

Yes I agree. Anything that helps is better than nothing with such devices.