Lucene search

K
mscveMicrosoftMS:CVE-2021-31957
HistoryJun 08, 2021 - 7:00 a.m.

ASP.NET Core Denial of Service Vulnerability

2021-06-0807:00:00
Microsoft
msrc.microsoft.com
159
asp.net
core
denial of service
vulnerability
microsoft

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

58.3%

Affected configurations

Vulners
Node
microsoft.netRange<5.0.7
OR
microsoft.net_coreRange<3.1.16
OR
microsoftvisual_studio_2019Range<8.10.1
OR
microsoftvisual_studio_2019Range<16.10.1
OR
microsoftvisual_studio_2019Range<16.9.7
OR
microsoftvisual_studio_2019Range<16.7.16
OR
microsoftvisual_studio_2019Range<16.4.23
VendorProductVersionCPE
microsoft.net*cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
microsoft.net_core*cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*
microsoftvisual_studio_2019*cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

58.3%