GHSA-f8qx-mjcq-wfgxHighCVSS 7.5
ASP.NET Core Denial of Service Vulnerability
🔗 CVE IDs covered (1)
📋 Description
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka ASP.NET Core Denial of Service Vulnerability.
🎯 Affected products12
- nuget/Microsoft.AspNetCore.App:>= 2.1.0, < 2.1.21
- nuget/Microsoft.AspNetCore.All:>= 2.1.0, < 2.1.21
- nuget/Microsoft.AspNetCore.App.Runtime.linux-arm:>= 3.1.0, < 3.1.7
- nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64:>= 3.1.0, < 3.1.7
- nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64:>= 3.1.0, < 3.1.7
- nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64:>= 3.1.0, < 3.1.7
- nuget/Microsoft.AspNetCore.App.Runtime.linux-x64:>= 3.1.0, < 3.1.7
- nuget/Microsoft.AspNetCore.App.Runtime.osx-x64:>= 3.1.0, < 3.1.7
- nuget/Microsoft.AspNetCore.App.Runtime.win-arm:>= 3.1.0, < 3.1.7
- nuget/Microsoft.AspNetCore.App.Runtime.win-arm64:>= 3.1.0, < 3.1.7
- nuget/Microsoft.AspNetCore.App.Runtime.win-x64:>= 3.1.0, < 3.1.7
- nuget/Microsoft.AspNetCore.App.Runtime.win-x86:>= 3.1.0, < 3.1.7
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2020-1597
- https://lists.fedoraproject.org/archives/list/[email protected]/message/WH5FQ5VT3JGHXFXOETHCTBWJUIAPGHHT/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/ZW4CBI26KSO3PRL3HLVVISXPPOYUHSXO/
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1597
- https://github.com/dotnet/announcements/issues/162
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WH5FQ5VT3JGHXFXOETHCTBWJUIAPGHHT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZW4CBI26KSO3PRL3HLVVISXPPOYUHSXO/
- https://github.com/advisories/GHSA-f8qx-mjcq-wfgx