GHSA-23cv-jh4v-vffmMedium
Denial of service in ASP.NET Core
🔗 CVE IDs covered (1)
📋 Description
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
🎯 Affected products13
- nuget/Microsoft.AspNetCore.All:>= 2.1.0, < 2.1.15
- nuget/Microsoft.AspNetCore.App:= 3.1.0
- nuget/Microsoft.AspNetCore.App:= 3.0.0
- nuget/Microsoft.AspNetCore.App:>= 2.1.0, < 2.1.15
- nuget/Microsoft.AspNetCore.Http.Connections:>= 1.0.0, < 1.0.15
- nuget/Microsoft.AspNetCore.App.Runtime.linux-arm:>= 3.1.0, < 3.1.1
- nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64:>= 3.1.0, < 3.1.1
- nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64:>= 3.1.0, < 3.1.1
- nuget/Microsoft.AspNetCore.App.Runtime.linux-x64:>= 3.1.0, < 3.1.1
- nuget/Microsoft.AspNetCore.App.Runtime.osx-x64:>= 3.1.0, < 3.1.1
- nuget/Microsoft.AspNetCore.App.Runtime.win-arm:>= 3.1.0, < 3.1.1
- nuget/Microsoft.AspNetCore.App.Runtime.win-x64:>= 3.1.0, < 3.1.1
- nuget/Microsoft.AspNetCore.App.Runtime.win-x86:>= 3.1.0, < 3.1.1
🔗 References (7)
- https://nvd.nist.gov/vuln/detail/CVE-2020-0602
- https://access.redhat.com/errata/RHSA-2020:0130
- https://access.redhat.com/errata/RHSA-2020:0134
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0602
- https://github.com/aspnet/Announcements/issues/402
- https://github.com/github/advisory-database/issues/302
- https://github.com/advisories/GHSA-23cv-jh4v-vffm