GHSA-f9jc-rrm2-pmfgHighCVSS 7.5
Denial of service in ASP.NET Core
🔗 CVE IDs covered (1)
📋 Description
.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability".
🎯 Affected products5
- nuget/Microsoft.AspNetCore.Server.WebListener:>= 1.0.0, < 1.0.6
- nuget/Microsoft.AspNetCore.Server.WebListener:>= 1.1.0, < 1.1.4
- nuget/Microsoft.Net.Http.Server:>= 1.0.0, < 1.0.6
- nuget/Microsoft.Net.Http.Server:>= 1.1.0, < 1.1.4
- nuget/Microsoft.AspNetCore.Server.HttpSys:>= 2.0.0, < 2.0.2