Think you have a false positive on this rule?

Sid 1-42458


PROTOCOL-DNS ISC BIND unexpected DNAME CNAME ordering denial of service attempt


This event is generated when an attempt is made to exploit a known vulnerability in 2017-3137.


Detailed information

Affected systems

Ease of attack

False positives

None known.

False negatives

None known.

Corrective action


  • Cisco Talos
  • This document was generated from data supplied by the National Vulnerability Database. A product of the National Institute of Standards and Technology.
  • For more information see

Additional References

  • CVE-2017-3137