The RebirthDay attack revives 2002-era DNS cache poisoning by abusing ECS

Researchers resurrected the DNS birthday attack, considered dead since 2002, by bypassing query aggregation through ECS; eight vendors acknowledged the issue and 50 CVEs were assigned. Unbound, PowerDNS, and BIND are affected — exposed resolvers should be patched immediately.