GHSA-cgpw-2gph-2r9gMediumDisclosed before NVD

Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core

Published
October 16, 2018
Last Modified
January 9, 2023

📋 Description

Microsoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated. An attacker who successfully exploited this vulnerability could cause a denial of service attack.

The update addresses the vulnerability by correcting how ASP.NET Core handles such requests.

🎯 Affected products5

  • nuget/Microsoft.AspNetCore.Server.Kestrel.Core:>= 2.0.0, < 2.0.4
  • nuget/Microsoft.AspNetCore.All:>= 2.0.0, < 2.0.9
  • nuget/Microsoft.AspNetCore.App:>= 2.1.0, < 2.1.2
  • nuget/Microsoft.AspNetCore.Server.Kestrel.Core:>= 2.1.0, < 2.1.2
  • nuget/Microsoft.AspNetCore.All:>= 2.1.0, < 2.1.2

🔗 References (2)