GHSA-3w5p-jhp5-c29qHighCVSS 7.5

.NET Core & .NET Framework Denial of Service Vulnerability

Published
May 24, 2022
Last Modified
February 2, 2023

🔗 CVE IDs covered (1)

CVE-2020-1108 →

📋 Description

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.

🎯 Affected products12

  • nuget/Microsoft.NETCore.App:>= 2.1.0, < 2.1.18
  • nuget/Microsoft.NETCore.App.Runtime.linux-arm:>= 3.1.0, < 3.1.4
  • nuget/Microsoft.NETCore.App.Runtime.linux-arm64:>= 3.1.0, < 3.1.4
  • nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm64:>= 3.1.0, < 3.1.4
  • nuget/Microsoft.NETCore.App.Runtime.linux-musl-x64:>= 3.1.0, < 3.1.4
  • nuget/Microsoft.NETCore.App.Runtime.linux-x64:>= 3.1.0, < 3.1.4
  • nuget/Microsoft.NETCore.App.Runtime.osx-x64:>= 3.1.0, < 3.1.4
  • nuget/Microsoft.NETCore.App.Runtime.rhel.6-x64:>= 3.1.0, < 3.1.4
  • nuget/Microsoft.NETCore.App.Runtime.win-arm:>= 3.1.0, < 3.1.4
  • nuget/Microsoft.NETCore.App.Runtime.win-arm64:>= 3.1.0, < 3.1.4
  • nuget/Microsoft.NETCore.App.Runtime.win-x64:>= 3.1.0, < 3.1.4
  • nuget/Microsoft.NETCore.App.Runtime.win-x86:>= 3.1.0, < 3.1.4

🔗 References (4)