SB2020090814 - Multiple vulnerabilities in Microsoft Active Directory

Security Bulletin ID SB2020090814

CSH Severity

Medium

Patch available

YES

Number of vulnerabilities 4

Exploitation vector Adjecent network

Highest impact Code execution

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 4 vulnerabilities.

1) Out-of-bounds read (CVE-ID: CVE-2020-0664)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when processing requests in Active Directory integrated DNS (ADIDNS). A remote authenticated user can send a specially crafted request to the AD|DNS service, trigger out-of-bounds read error and read contents of memory on the system.

2) Buffer overflow (CVE-ID: CVE-2020-0718)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing requests in Active Directory integrated DNS (ADIDNS) server. A remote authenticated user can create a specially crafted request to the server, trigger memory corruption and execute arbitrary code on the target system in the context of the Local System Account.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

3) Buffer overflow (CVE-ID: CVE-2020-0761)