PT-2020-3085 · Microsoft · Windows Dns Server+1

Eyal Itkin + 1 · Published 2020-07-14 · Updated 2026-03-10 · CVE-2020-1350

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows DNS Server versions 2013 through 2019

Description A remote code execution issue exists in Windows Domain Name System servers when they fail to properly handle requests. This can be exploited by a remote attacker using a specially crafted DNS request, allowing them to execute arbitrary code. The vulnerability is also known as 'Windows DNS Server Remote Code Execution Vulnerability' and has been present for 17 years, affecting Windows DNS Servers from 2013 to 2019 editions. It is a 'wormable' bug, enabling attackers to launch malware attacks that can spread from one vulnerable computer to another without human interaction.

Recommendations For Microsoft Windows DNS Server versions 2013 through 2019, apply the patch provided by Microsoft to fix the vulnerability. At the moment, there is no information about other newer versions that contain a fix for this vulnerability.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-20

Related Identifiers

BDU:2020-03377

CVE-2020-1350

Affected Products

Windows

Windows Dns Server

References · 71

• 🔥 https://github.com/ZephrFish/CVE-2020-1350 · Exploit
• 🔥 https://github.com/ZephrFish/CVE-2020-1350_HoneyPoC · Exploit
• 🔥 https://github.com/maxpl0it/CVE-2020-1350-DoS · Exploit
• 🔥 https://github.com/psc4re/NSE-scripts · Exploit
• 🔥 https://github.com/T13nn3s/CVE-2020-1350 · Exploit
• 🔥 https://github.com/captainGeech42/CVE-2020-1350 · Exploit
• 🔥 https://github.com/corelight/SIGRed · Exploit
• 🔥 https://github.com/connormcgarr/CVE-2020-1350 · Exploit
• 🔥 https://github.com/zoomerxsec/Fake_CVE-2020-1350 · Exploit
• 🔥 https://github.com/mr-r3b00t/CVE-2020-1350 · Exploit
• 🔥 https://github.com/simeononsecurity/CVE-2020-1350-Fix · Exploit
• 🔥 https://github.com/graph-inc/CVE-2020-1350 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-1350 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1350 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-1350 · Vendor Advisory