CVE-2020-1350 Vulnerability in Windows Domain Name System (DNS) Server

Give it 24 hours.

---

So the problem is with TCP DNS responses larger than 65280 bytes... With a CVSS score of 10.0, something tells me this is gonna be pretty trivial.

Get / cause the DNS server to send a legitimate (TCP-based) query to your server, reply with a crafted response > 65280 bytes, BOOM?

I expect it shouldn't take long to figure out the issue -- and, thus, how to craft a "magic packet", just by examining the bindiff/patch. Hell, it might even be possible to trigger it just playing around with a TCP fuzzer!

> We consider this to be a wormable vulnerability, meaning that it has the potential to spread via malware between vulnerable computers without user interaction.

Oh man, it should be fun to watch the fallout from this over the coming days...