Microsoft Patch Tuesday for July 2020 — Snort rules and prominent vulnerabilities
Summary: Microsoft's July 2020 security update disclosed more than 120 vulnerabilities across its products, including six critical bugs Cisco Talos discovered in the RemoteFX feature of the Windows Hyper-V engine that could allow remote code execution and escape from a Hyper-V virtual machine to the host. Microsoft addressed those by disabling RemoteFX in Hyper-V, and also fixed CVE-2020-1350, a Windows DNS server remote code execution vulnerability with a base CVSS score of 10 that could be exploited in a self-replicating way.
Bottom line: A CVSS 10.0 wormable flaw in Windows DNS, one of the core components of networking, means an adversary sending malicious requests to a DNS server could run arbitrary code as Local System and cause major disruptions - and the Hyper-V bugs carried a path from a guest VM to the host.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-1350
- Related
- CVE-2020-1350: Microsoft Windows DNS Server Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021‘Wormable’ Flaw Leads July Microsoft Patches Cyber Risks ·