Ansible Registry workaround for CVE-2020-1350

Archives Ansible Project
1

If needed. This worked for me.

DESCRIPTION

Registry workaround for CVE-2020-1350

  • name: Registry workaround for CVE-2020-1350

hosts: dns_servers

gather_facts: yes

tasks:

  • name: Apply Reg workaround

win_regedit:

path: HKLM:\SYSTEM\CurrentControlSet\Services\DNS\Parameters

name: TcpReceivePacketSize

data: 0xFF00

type: dword

state: present

  • name: Restart DNS

win_service:

name: DNS

state: restarted