Microsoft patches critical wormable SigRed bug in Windows DNS Server

[silversurfer]

Content source

https://www.bleepingcomputer.com/news/security/microsoft-patches-critical-wormable-sigred-bug-in-windows-dns-server/

A critical vulnerability that’s been sitting in Microsoft’s Windows DNS Server for almost two decades could be exploited to gain Domain Administrator privileges and compromise the entire corporate infrastructure behind it.

The vulnerability received the tracking identifier CVE-2020-1350 and the name SigRed. It is a remote code execution that affects Windows Server versions 2003 through 2019 and received the maximum severity rating, 10 out of 10.

It is wormable, meaning that an exploit can propagate automatically to vulnerable machines on the network with no user interaction. This characteristic puts it in the same risk category as EternalBlue in Server Message Block (SMB) and BlueKeep in the Remote Desktop Protocol (RDP).

 

[upnorth]

 

[silversurfer]

Federal agencies told to patch wormable Windows DNS bug in 24 hours

The Cybersecurity and Infrastructure Security Agency (CISA) today asked all U.S. federal executive branch departments and agencies to mitigate the critical SIGRed Windows DNS Server wormable remote code execution (RCE) vulnerability within 24 hours.

www.bleepingcomputer.com

"CISA has determined that this vulnerability poses unacceptable significant risk to the federal Civilian Executive Branch and requires an immediate and emergency action," the agency said in an emergency directive issued today.

"This determination is based on the likelihood of the vulnerability being exploited, the widespread use of the affected software across the Federal enterprise, the high potential for a compromise of agency information systems, and the grave impact of a successful compromise."

CISA's emergency directive requires agencies to update all endpoints running Windows Server operating systems within 24 hours (by 2:00 pm EST, Friday, July 17, 2020).

 

[silversurfer]

Critical SIGred Windows DNS bug gets micropatch after PoCs released

The critical remote code execution security vulnerability in Windows DNS known as SIGRed has received a micropatch for servers without an Extended Security Updates (ESU) license.

www.bleepingcomputer.com

Micropatch Available for "SIGRed", the Wormable Remote Code Execution in Windows DNS Server (CVE-2020-1350)

by Mitja Kolsek, the 0patch Team This month's Patch Tuesday included a fix for CVE-2020-1350, a critical memory corruption vuln...

blog.0patch.com