Threat Brief: Microsoft DNS Server Wormable Vulnerability CVE-2020-1350
Summary: In July 2020, Microsoft released a security update for CVE-2020-1350, a remote code execution vulnerability in Windows DNS Server caused by improper handling of certain requests over port 53/TCP. Exploitation works by creating an integer overflow, which can lead to remote code execution, and Microsoft also published a workaround in KB4569509 for cases where patching is not immediately possible.
What's compelling: This is a wormable flaw in a service that resolves names for nearly every Windows environment, and the source notes a workaround exists precisely because some organizations cannot patch right away - leaving the window between disclosure and remediation as the exposure.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-1350
- Related
- CVE-2020-1350: Microsoft Windows DNS Server Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021‘Wormable’ Flaw Leads July Microsoft Patches Cyber Risks ·