ML
    • Register
    • Login
    • Search
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups

    Patch all your Windows DNS servers - CVE-2020-1350 - CVSS score of 10

    IT Discussion
    dns security windows windows server
    4
    5
    367
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Nic
      Nic last edited by scottalanmiller

      There's a wormable exploit that has a patch out:

      https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350

      Until you patch, hackers can send a malformed packet to your DNS server and exploit that to run a remote code execution.

      1 Reply Last reply Reply Quote 4
      • P
        pmoncho last edited by

        Just wondering - Is anyone seeing a patch for 2019 with a reference to the KB article?
        Checked yesterday, last night and this morning. No update that I can see.

        Currently performing the workaround.

        dbeato 1 Reply Last reply Reply Quote 0
        • Grey
          Grey last edited by Grey

          Is there a test/app to validate whether a server is vulnerable?

          1 Reply Last reply Reply Quote 0
          • dbeato
            dbeato @pmoncho last edited by

            @pmoncho said in Patch all your Windows DNS servers - CVE-2020-1350 - CVSS score of 10:

            Just wondering - Is anyone seeing a patch for 2019 with a reference to the KB article?
            Checked yesterday, last night and this morning. No update that I can see.

            Currently performing the workaround.

            c46cc947-cad4-4bfc-877c-dbd1c1ddfd16-image.png

            https://www.catalog.update.microsoft.com/Search.aspx?q=KB4558998

            P 1 Reply Last reply Reply Quote 0
            • P
              pmoncho @dbeato last edited by

              @dbeato said in Patch all your Windows DNS servers - CVE-2020-1350 - CVSS score of 10:

              @pmoncho said in Patch all your Windows DNS servers - CVE-2020-1350 - CVSS score of 10:

              Just wondering - Is anyone seeing a patch for 2019 with a reference to the KB article?
              Checked yesterday, last night and this morning. No update that I can see.

              Currently performing the workaround.

              c46cc947-cad4-4bfc-877c-dbd1c1ddfd16-image.png

              https://www.catalog.update.microsoft.com/Search.aspx?q=KB4558998

              Thanks. Forgot about the update catalog.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post