CVE-2020-0836

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

<p>A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries. An attacker who successfully exploited this vulnerability could cause the DNS service to become nonresponsive.</p> <p>To exploit the vulnerability, an authenticated attacker could send malicious DNS queries to a target, resulting in a denial of service.</p> <p>The update addresses the vulnerability by correcting how Windows DNS processes queries.</p>

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
MicrosoftWindows Server version 2004>= 10.0.0, < publication
MicrosoftWindows Server 2019>= 10.0.0, < publication
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.0, < publication
MicrosoftWindows Server, version 1909 (Server Core installation)>= 10.0.0, < publication
MicrosoftWindows Server, version 1903 (Server Core installation)>= 10.0.0, < publication
MicrosoftWindows Server 2016>= 10.0.0, < publication
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.0, < publication
MicrosoftWindows Server 2008 Service Pack 2>= 6.0.0, < publication
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)>= 6.0.0, < publication
MicrosoftWindows Server 2008 Service Pack 2>= 6.0.0, < publication
MicrosoftWindows Server 2008 R2 Service Pack 1>= 6.1.0, < publication
MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation)>= 6.0.0, < publication
MicrosoftWindows Server 2012>= 6.2.0, < publication
MicrosoftWindows Server 2012 (Server Core installation)>= 6.2.0, < publication
MicrosoftWindows Server 2012 R2>= 6.3.0, < publication
MicrosoftWindows Server 2012 R2 (Server Core installation)>= 6.3.0, < publication

References

Timeline

Published
Sep 11, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-08375.0<p>An elevation of privilege vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authenticCVE-2020-08387.8<p>An elevation of privilege vulnerability exists when NTFS improperly checks access. An attacker who successfully exploited this vulnerabilCVE-2020-08397.8<p>An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully eCVE-2020-08407.8An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege VulCVE-2020-08417.8An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege VulCVE-2020-08427.8An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioCVE-2020-08437.8An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioCVE-2020-08447.8An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, akaCVE-2020-08457.8An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoCVE-2020-08477.5A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code ExecutCVE-2020-08487.5A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginCVE-2020-08497.8An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vul
CVE-2020-0836: High severity, CVSS 7.5 | Vulnix