ADV200013 — Microsoft Guidance for Addressing Spoofing Vulnerability in DNS Resolver

Executive Summary

Microsoft is aware of a vulnerability involving DNS cache poisoning caused by IP fragmentation that affects Windows DNS Resolver. An attacker who successfully exploited this vulnerability could spoof the DNS packet which can be cached by the DNS Forwarder or the DNS Resolver. For more information see the Workaround sections of this advisory.

Overview

Important

MS Severity

Not Exploited

MS Exploit Status

Less Likely

MS Exploit Likelihood

Category Spoofing

Released Dec 8 2020

Last Updated Dec 8 2020

Publicly Disclosed No

CISA KEV Not Listed

Known Exploits None Known

EPSS Score

No EPSS score available for this CVE.

View on FIRST.org

Known Exploits

No known exploits have been linked for this CVE yet. When available, exploit references will be sourced from public repositories and may be unverified, incomplete, or non-functional. Always review code carefully before use in any environment.

Acknowledgments

Tsinghua University-QI-ANXIN Group JCNS

References

MSRC Advisory MITRE NVD