CVE-2021-31957HighCVSS 5.9
ASP.NET Core Denial of Service Vulnerability
🔗 CVE IDs covered (1)
🎯 Affected products7
- .NET 5.0
- .NET Core 3.1
- Microsoft Visual Studio 2019 version 16.10 (includes 16.0 - 16.9)
- Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
- Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
- Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
- Visual Studio 2019 for Mac version 8.10
✅ Remediation
KBRelease Notes (Security Update) — fixed build 16.4.23 KBRelease Notes (Security Update) — fixed build 16.7.16 KBRelease Notes (Security Update) — fixed build 16.9.7 KBRelease Notes (Security Update) — fixed build 16.10.1 KBRelease Notes (Security Update) — fixed build 8.10.1 KBRelease Notes (Security Update) — fixed build 3.1.16 KBRelease Notes (Security Update) — fixed build 5.0.7
🔗 References (8)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31957
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.4
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.9
- patchhttp://aka.ms/vs/16/release/latest
- patchhttps://visualstudio.microsoft.com/downloads
- patchhttps://dotnet.microsoft.com/download/dotnet-core/3.1
- patchhttps://dotnet.microsoft.com/download/dotnet/5.0