CVE-2020-1350 - Vulnerability Details - OpenCVE

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is in the KEV database since Nov. 3, 2021.

Exploitation active

Automatable yes

Technical Impact total

Vendors	Products
Microsoft	Windows Server 2008 Windows Server 2012 Windows Server 2016 Windows Server 2019

Configuration 1 [-]

OR	cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::
	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*
	cpe:2.3:o:microsoft:windows_server_2012:-:::::::*
	cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*
	cpe:2.3:o:microsoft:windows_server_2016:-:::::::*
	cpe:2.3:o:microsoft:windows_server_2016:1903:::::::*
	cpe:2.3:o:microsoft:windows_server_2016:1909:::::::*
	cpe:2.3:o:microsoft:windows_server_2016:2004:::::::*
	cpe:2.3:o:microsoft:windows_server_2019:-:::::::*

No data.

References

Link	Providers
http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350

History

Fri, 07 Feb 2025 17:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-20
Metrics		kev `{'dateAdded': '2021-11-03'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2020-07-14T22:54:06.000Z

Updated: 2025-02-07T16:38:21.353Z

Reserved: 2019-11-04T00:00:00.000Z

Link: CVE-2020-1350

Vulnrichment

Updated: 2025-02-07T14:38:14.544Z

NVD

Status : Modified

Published: 2020-07-14T23:15:13.087

Modified: 2025-02-07T17:15:20.613

Link: CVE-2020-1350

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "Windows Server", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "2019"}, {"status": "affected", "version": "2019 (Core installation)"}, {"status": "affected", "version": "2016"}, {"status": "affected", "version": "2016 (Core installation)"}, {"status": "affected", "version": "2008 for 32-bit Systems Service Pack 2"}, {"status": "affected", "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)"}, {"status": "affected", "version": "2008 for x64-based Systems Service Pack 2"}, {"status": "affected", "version": "2008 for x64-based Systems Service Pack 2 (Core installation)"}, {"status": "affected", "version": "2008 R2 for x64-based Systems Service Pack 1"}, {"status": "affected", "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"}, {"status": "affected", "version": "2012"}, {"status": "affected", "version": "2012 (Core installation)"}, {"status": "affected", "version": "2012 R2"}, {"status": "affected", "version": "2012 R2 (Core installation)"}]}, {"product": "Windows Server, version 1909 (Server Core installation)", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "unspecified"}]}, {"product": "Windows Server, version 1903 (Server Core installation)", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "unspecified"}]}, {"product": "Windows Server, version 2004 (Server Core installation)", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "unspecified"}]}], "descriptions": [{"lang": "en", "value": "A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'."}], "problemTypes": [{"descriptions": [{"description": "Remote Code Execution", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-07-21T01:06:12.000Z", "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@microsoft.com", "ID": "CVE-2020-1350", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Windows Server", "version": {"version_data": [{"version_value": "2019"}, {"version_value": "2019 (Core installation)"}, {"version_value": "2016"}, {"version_value": "2016 (Core installation)"}, {"version_value": "2008 for 32-bit Systems Service Pack 2"}, {"version_value": "2008 for 32-bit Systems Service Pack 2 (Core installation)"}, {"version_value": "2008 for x64-based Systems Service Pack 2"}, {"version_value": "2008 for x64-based Systems Service Pack 2 (Core installation)"}, {"version_value": "2008 R2 for x64-based Systems Service Pack 1"}, {"version_value": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"}, {"version_value": "2012"}, {"version_value": "2012 (Core installation)"}, {"version_value": "2012 R2"}, {"version_value": "2012 R2 (Core installation)"}]}}, {"product_name": "Windows Server, version 1909 (Server Core installation)", "version": {"version_data": [{"version_value": ""}]}}, {"product_name": "Windows Server, version 1903 (Server Core installation)", "version": {"version_data": [{"version_value": ""}]}}, {"product_name": "Windows Server, version 2004 (Server Core installation)", "version": {"version_data": [{"version_value": ""}]}}]}, "vendor_name": "Microsoft"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Remote Code Execution"}]}]}, "references": {"reference_data": [{"name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350", "refsource": "MISC", "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350"}, {"name": "http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html", "refsource": "MISC", "url": "http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T06:32:01.039Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html"}]}, {"metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 10, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2020-1350", "role": "CISA Coordinator", "options": [{"Exploitation": "active"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-07T14:38:31.758044Z"}}}, {"other": {"type": "kev", "content": {"dateAdded": "2021-11-03", "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1350"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-07T16:38:21.353Z"}}]}, "cveMetadata": {"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "assignerShortName": "microsoft", "cveId": "CVE-2020-1350", "datePublished": "2020-07-14T22:54:06.000Z", "dateReserved": "2019-11-04T00:00:00.000Z", "dateUpdated": "2025-02-07T16:38:21.353Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"containers": {"cna": {"affected": [{"product": "Windows Server", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "2019"}, {"status": "affected", "version": "2019 (Core installation)"}, {"status": "affected", "version": "2016"}, {"status": "affected", "version": "2016 (Core installation)"}, {"status": "affected", "version": "2008 for 32-bit Systems Service Pack 2"}, {"status": "affected", "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)"}, {"status": "affected", "version": "2008 for x64-based Systems Service Pack 2"}, {"status": "affected", "version": "2008 for x64-based Systems Service Pack 2 (Core installation)"}, {"status": "affected", "version": "2008 R2 for x64-based Systems Service Pack 1"}, {"status": "affected", "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"}, {"status": "affected", "version": "2012"}, {"status": "affected", "version": "2012 (Core installation)"}, {"status": "affected", "version": "2012 R2"}, {"status": "affected", "version": "2012 R2 (Core installation)"}]}, {"product": "Windows Server, version 1909 (Server Core installation)", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "unspecified"}]}, {"product": "Windows Server, version 1903 (Server Core installation)", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "unspecified"}]}, {"product": "Windows Server, version 2004 (Server Core installation)", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "unspecified"}]}], "descriptions": [{"lang": "en", "value": "A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'."}], "problemTypes": [{"descriptions": [{"description": "Remote Code Execution", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-07-21T01:06:12", "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@microsoft.com", "ID": "CVE-2020-1350", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Windows Server", "version": {"version_data": [{"version_value": "2019"}, {"version_value": "2019 (Core installation)"}, {"version_value": "2016"}, {"version_value": "2016 (Core installation)"}, {"version_value": "2008 for 32-bit Systems Service Pack 2"}, {"version_value": "2008 for 32-bit Systems Service Pack 2 (Core installation)"}, {"version_value": "2008 for x64-based Systems Service Pack 2"}, {"version_value": "2008 for x64-based Systems Service Pack 2 (Core installation)"}, {"version_value": "2008 R2 for x64-based Systems Service Pack 1"}, {"version_value": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"}, {"version_value": "2012"}, {"version_value": "2012 (Core installation)"}, {"version_value": "2012 R2"}, {"version_value": "2012 R2 (Core installation)"}]}}, {"product_name": "Windows Server, version 1909 (Server Core installation)", "version": {"version_data": [{"version_value": ""}]}}, {"product_name": "Windows Server, version 1903 (Server Core installation)", "version": {"version_data": [{"version_value": ""}]}}, {"product_name": "Windows Server, version 2004 (Server Core installation)", "version": {"version_data": [{"version_value": ""}]}}]}, "vendor_name": "Microsoft"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Remote Code Execution"}]}]}, "references": {"reference_data": [{"name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350", "refsource": "MISC", "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350"}, {"name": "http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html", "refsource": "MISC", "url": "http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html"}]}}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 10, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2020-1350", "role": "CISA Coordinator", "options": [{"Exploitation": "active"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-07T14:38:31.758044Z"}}}, {"other": {"type": "kev", "content": {"dateAdded": "2021-11-03", "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1350"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2025-02-07T14:38:14.544Z"}, "title": "CISA ADP Vulnrichment"}]}, "cveMetadata": {"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "assignerShortName": "microsoft", "cveId": "CVE-2020-1350", "datePublished": "2020-07-14T22:54:06", "dateReserved": "2019-11-04T00:00:00", "dateUpdated": "2024-08-04T06:32:01.039Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"cisaActionDue": "2020-07-24", "cisaExploitAdd": "2021-11-03", "cisaRequiredAction": "Apply updates per vendor instructions.", "cisaVulnerabilityName": "Microsoft Windows DNS Server Remote Code Execution Vulnerability", "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*", "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*", "matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*", "matchCriteriaId": "5B921FDB-8E7D-427E-82BE-4432585080CF", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*", "matchCriteriaId": "C253A63F-03AB-41CB-A03A-B2674DEA98AA", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*", "matchCriteriaId": "0B60D940-80C7-49F0-8F4E-3F99AC15FA82", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de ejecuci\u00f3n de c\u00f3digo remota en los servidores de Windows Domain Name System cuando presentan un fallo al manejar apropiadamente las peticiones, tambi\u00e9n se conoce como \"Windows DNS Server Remote Code Execution Vulnerability\""}], "id": "CVE-2020-1350", "lastModified": "2025-02-07T17:15:20.613", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 6.0, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2020-07-14T23:15:13.087", "references": [{"source": "secure@microsoft.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html"}, {"source": "secure@microsoft.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350"}], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}