If needed. This worked for me.
DESCRIPTION
Registry workaround for CVE-2020-1350
- name: Registry workaround for CVE-2020-1350
hosts: dns_servers
gather_facts: yes
tasks:
- name: Apply Reg workaround
win_regedit:
path: HKLM:\SYSTEM\CurrentControlSet\Services\DNS\Parameters
name: TcpReceivePacketSize
data: 0xFF00
type: dword
state: present
- name: Restart DNS
win_service:
name: DNS
state: restarted