In which of the following attacking methods does an attacker distribute incorrect IP address?

IP spoofing falsifies the source IP address in packet headers to impersonate another host, but does not distribute incorrect IP-to-domain mappings to resolvers or other systems.

MAC flooding overwhelms a switch's CAM table with fake MAC addresses to force it into hub mode - it is a Layer 2 attack entirely unrelated to IP address distribution.

In DNS poisoning (also called DNS cache poisoning), an attacker corrupts a DNS resolver's cache by inserting fraudulent resource records that map legitimate domain names to attacker-controlled IP addresses. Clients querying the poisoned resolver receive the incorrect IP addresses and are silently redirected to malicious destinations without their knowledge.

A man-in-the-middle attack intercepts and possibly modifies traffic between two parties but is not specifically defined by distributing incorrect IP addresses to DNS resolvers or clients.