CVE-2020-1350 vulnerability and Azure PaaS resources

Question

I've got a customer needing documentation regarding the CVE-2020-1350 vulnerability and its impact on Azure Public and Government clouds especially PaaS and SaaS resources? I've looked around the Azure Security Center along with several other places and not seeing anything regarding the topic.

Answer 1

Hello @John Batzer ,

Recently, Microsoft released a security update for the issue that is described in CVE-2020-1350 | Windows DNS Server Remote Code Execution Vulnerability. This advisory describes a Critical Remote Code Execution (RCE) vulnerability that affects Windows servers that are configured to run the DNS Server role. The only impacted product is Microsoft Windows DNS servers. And Windows servers that are configured as DNS servers are at risk from this vulnerability.

Please refer to the below article for Guidance for DNS Server Vulnerability CVE-2020-1350:
https://support.microsoft.com/en-in/help/4569509/windows-dns-server-remote-code-execution-vulnerability

Hope this helps!

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please don’t forget to "Accept the answer" wherever the information provided helps you, this can be beneficial to other community members.

Answer 2

@GitaraniSharma-MSFT ,

Thank you for the response. I had looked at both links you included in your response prior to submitting this question, but these articles seem to only identify the Windows server product line. These articles do not address Azure cloud infrastructure that utilize DNS services behind the scenes like PaaS and SaaS Azure resources.

If answering the question directly reveals propriety information or presents a security risk, I understand. If that is the case, please point me to documentation that discusses the overall Microsoft Azure security response process to CVEs. That should be sufficient for my customer's needs.

Again, thank you in advance!

JB