Guru3D.com
  • HOME
  • NEWS
    • Channels
    • Archive
  • DOWNLOADS
    • New Downloads
    • Categories
    • Archive
  • GAME REVIEWS
  • ARTICLES
    • Rig of the Month
    • Join ROTM
    • PC Buyers Guide
    • Guru3D VGA Charts
    • Editorials
    • Dated content
  • HARDWARE REVIEWS
    • Videocards
    • Processors
    • Audio
    • Motherboards
    • Memory and Flash
    • SSD Storage
    • Chassis
    • Media Players
    • Power Supply
    • Laptop and Mobile
    • Smartphone
    • Networking
    • Keyboard Mouse
    • Cooling
    • Search articles
    • Knowledgebase
    • More Categories
  • FORUMS
  • NEWSLETTER
  • CONTACT

New Reviews
Backforce One Plus Gaming Chair review
ASUS GeForce RTX 3080 Noctua OC review
AMD Ryzen 5 5600 review
PowerColor RX 6650 XT Hellhound White review
FSP Hydro PTM Pro (1200W PSU) review
ASUS ROG Radeon RX 6750 XT STRIX review
AMD FidelityFX Super Resolution 2.0 - preview
Sapphire Radeon RX 6650 XT Nitro+ review
Sapphire Radeon RX 6950 XT Sapphire Nitro+ Pure review
Sapphire Radeon RX 6750 XT Nitro+ review

New Downloads
Corsair Utility Engine Download (iCUE) Download v4.24.193
Intel HD graphics Driver Download Version: 30.0.101.1994
GeForce 512.95 WHQL driver download
AMD Radeon Software Adrenalin 22.5.2 driver download
AIDA64 Download Version 6.70
FurMark Download v1.30
Display Driver Uninstaller Download version 18.0.5.1
Download Samsung Magician v7.1.1.820
Intel ARC graphics Driver Download Version: 30.0.101.1732
HWiNFO Download v7.24


New Forum Topics
Should I use the latest stable release of "Nvidia Profile Inspector" or the latest pre-release? Secure boot Vialation 3080 Ti Owner's thread Are we ever going to get a new NVIDIA CONTROL PANEL ??? NVIDIA DLSS Extends Support for 12 More Games including Hitman 3 and F1 22 Help my Gtx 970 fan wont slow down AMD reaffirms that the 5.5+ GHz of the Ryzen 7000 in the presentations was achieved without overclocking Info Zone - gEngines, Ray Tracing, DLSS, DLAA, TSR, FSR, XeSS, DLDSR etc. MSI Gaming Reveals Symbols to Help Identify MEG, MPG, and MAG Series 512.95 - Clean Version




Guru3D.com » News » Microsoft warns of wormable vulnerability in Windows DNS Server

Microsoft warns of wormable vulnerability in Windows DNS Server

by Hilbert Hagedoorn on: 07/15/2020 08:26 AM | source: checkpoint.com | 5 comment(s)
Microsoft warns of wormable vulnerability in Windows DNS Server

Windows DNS Server holds a seventeen-year-old significant vulnerability, which is named as wormable and has the most important possible risk score. Administrators should update Windows Server systems as soon as possible.

Today we released an update for CVE-2020-1350, a Critical Remote Code Execution (RCE) vulnerability in Windows DNS Server that is classified as a ‘wormable’ vulnerability and has a CVSS base score of 10.0. This issue results from a flaw in Microsoft’s DNS server role implementation and affects all Windows Server versions. Non-Microsoft DNS Servers are not affected.

Wormable vulnerabilities have the potential to spread via malware between vulnerable computers without user interaction. Windows DNS Server is a core networking component. While this vulnerability is not currently known to be used in active attacks, it is essential that customers apply Windows updates to address this vulnerability as soon as possible.

If applying the update quickly is not practical, a registry-based workaround is available that does not require restarting the server. The update and the workaround are both detailed in CVE-2020-1350.

Customers with automatic updates turned on do not need to take any additional action.







« Download: Radeon Adrenalin Edition 20.7.2 drivers · Microsoft warns of wormable vulnerability in Windows DNS Server · Razer Unveils the Razer Huntsman Mini »

Related Stories

Microsoft Details Its Velocity Architecture Behind the Xbox Series X: - 07/14/2020 07:36 PM
Xbox Velocity Architecture, what a catchy marketing phrase, Microsoft is giving you a closer look at the next-gen tech driving gaming innovation Forward on Xbox Series X. ...

Microsoft Flight Simulator will be released for PC on August 18 in three versions - 07/14/2020 09:01 AM
The much-anticipated Flight Simulator from Microsoft will see a release on August 18 for Windows 10. The Standard Edition is available via the Game Pass subscription or sold separately for 70 euros. E...

Warner Bros. gaming division for sale (Update: Microsoft going for it) - 07/07/2020 08:24 AM
And the current companies interested in buying WB games are Take-Two, EA and Activision Blizzard,  a deal that may be worth around $4 billion chatter indicates...

Microsoft Silently Patches two Windows 10 Codec Vulnerabilities - 07/05/2020 05:15 PM
Microsoft bumped into a twofold of issues in two codecs from the Windows Codecs Library, which were found to be vulnerable to systems running Windows 10 and Windows Server 2019....

Advertorial: Microsoft licenses for less than 13usd: offers at URcdkey - 07/03/2020 08:44 AM
Return our usual appointment with URcdkey offers, through which we will have the opportunity to save quite interesting sums on the software essential for our PCs. On the other hand, we are in summer, ...


sverek



Posts: 6073
Joined: 2011-01-02

#5809146 Posted on: 07/15/2020 08:37 AM
Ah yes, Windows. A black box full of surprises!

Rich_Guy
Senior Member



Posts: 12767
Joined: 2003-05-11

#5809311 Posted on: 07/15/2020 04:23 PM
Im sure this got plugged in yesterdays security updates, along with the other 100+ :P

BetA
Senior Member



Posts: 4398
Joined: 2008-03-03

#5809334 Posted on: 07/15/2020 05:06 PM
heres teh workaround...


If applying these patches is not currently feasible, Microsoft provided a workaround
via a Windows registry modification:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters

DWORD = TcpReceivePacketSize

Value = 0xFF00

In order for these changes to take effect, the DNS Service must be restarted.
Microsoft recommends removing the workaround after patches have been applied.



i guess im in the clear, since im NOT USING the windows DNS Service (its disabled here) :p
DNSCryptProxy all the way baby... :)


still, i shall update my system tonight....

anticupidon
Senior Member



Posts: 6751
Joined: 2008-03-06

#5809670 Posted on: 07/16/2020 02:52 PM
SigRED

Mda400
Senior Member



Posts: 1010
Joined: 2008-07-10

#5809798 Posted on: 07/16/2020 08:39 PM
I disabled Windows Update a long time ago. It is useless because Windows is never secured at any point of its life. I use Windows only for gaming, don't keep any personal info on it or do anything else. I format it every month anyways.


He's vulnerable, get 'em boys!



Post New Comment
Click here to post a comment for this news story on the message forum.


Guru3D.com © 2022