Skip to content
7.5 High

CVE-2020-1228 <p>A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries

Description

<p>A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries. An attacker who successfully exploited this vulnerability could cause the DNS service to become nonresponsive.</p> <p>To exploit the vulnerability, an authenticated attacker could send malicious DNS queries to a target, resulting in a denial of service.</p> <p>The update addresses the vulnerability by correcting how Windows DNS processes queries.</p>

Affected products and versions

Product Affected versions Fixed in
Windows Server version 2004 10.0 10.0.0 → latest No fix stated
Windows Server 2019 10.0 10.0.0 → latest No fix stated
Windows Server 2019 (Server Core installation) 10.0 10.0.0 → latest No fix stated
Windows Server, version 1909 (Server Core installation) 10.0 10.0.0 → latest No fix stated
Windows Server, version 1903 (Server Core installation) 10.0 10.0.0 → latest No fix stated
Windows Server 2016 10.0 10.0.0 → latest No fix stated
Windows Server 2016 (Server Core installation) 10.0 10.0.0 → latest No fix stated
Windows Server 2008 Service Pack 2 6.0 6.0.0 → latest No fix stated
Windows Server 2008 Service Pack 2 (Server Core installation) 6.0 6.0.0 → latest No fix stated
Show the 7 other branches
Product Affected versions Fixed in
Windows Server 2008 Service Pack 2 6.0 6.0.0 → latest No fix stated
Windows Server 2008 R2 Service Pack 1 6.1 6.1.0 → latest No fix stated
Windows Server 2008 R2 Service Pack 1 (Server Core installation) 6.0 6.0.0 → latest No fix stated
Windows Server 2012 6.2 6.2.0 → latest No fix stated
Windows Server 2012 (Server Core installation) 6.2 6.2.0 → latest No fix stated
Windows Server 2012 R2 6.3 6.3.0 → latest No fix stated
Windows Server 2012 R2 (Server Core installation) 6.3 6.3.0 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified
The 749 CVEs of Windows Server version 2004 →
Track this CVE