Skip to content
Threat Feed
Subscribe

Tag

Sigred

1 brief RSS
medium advisory

Detection of Abnormally Large DNS Responses Indicative of CVE-2020-1350 Exploitation

This rule detects abnormally large DNS responses indicative of exploitation attempts targeting a known overflow vulnerability (CVE-2020-1350) in Windows DNS servers, potentially leading to Remote Code Execution (RCE) or Denial of Service (DoS).

Windows DNS Server sigred dns-server vulnerability
2r 2t