‘You don’t have to do more than that to disconnect an entire network’ El Reg told as patches emerge

A 20-plus-year-old security vulnerability in the design of DNSSEC (Domain Name System Security Extensions) could allow a single DNS packet to exhaust the processing capacity of any server using the system for domain name resolution, effectively disabling the machine.…