CVE-2023-32020: medium-severity vulnerability in Microsoft Windows Server 2008 R2 Service Pack 1
Windows DNS Spoofing Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Windows DNS servers can be tricked into accepting fake DNS responses from attackers on the same network, causing users to be directed to malicious websites instead of legitimate ones. This is dangerous because users trust their DNS results without realizing they've been redirected.
A DNS cache poisoning vulnerability in Windows DNS implementations allows an attacker on the same network segment to inject spoofed DNS responses that bypass validation checks, potentially resulting in users being redirected to attacker-controlled sites. The attack requires network proximity and the victim DNS resolver to process the malicious response before the legitimate one.
In the same product, most dangerous first.