What is the SigRed vulnerability in Windows DNS Server?

Read the original article: What is the SigRed vulnerability in Windows DNS Server?


What is it? SigRed, CVE-2020-1350, is a remote code execution vulnerability in the Microsoft Windows DNS server that was publicly disclosed on July 14, 2020, by Israeli cybersecurity firm Check Point.   When a DNS server receives a query for a domain it isn’t responsible (authoritative) for it asks a DNS server further up the hierarchy which DNS server is, and then queries that DNS server for the record. The vulnerability exists in how the Windows DNS server parses the…

Read More Read More

The post What is the SigRed vulnerability in Windows DNS Server? appeared first on Insider Threat Security Blog.


Read the original article: What is the SigRed vulnerability in Windows DNS Server?