Denial of service in ASP.NET Core

2022-05-1301:42:35

Google

osv.dev

0.003 Low

EPSS

Percentile

68.1%

JSON

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka “.NET CORE Denial Of Service Vulnerability”.

CPENameOperatorVersion
microsoft.net.http.servereq1.0.1
microsoft.aspnetcore.server.weblistenereq1.0.3
microsoft.aspnetcore.server.httpsyseq2.0.0
microsoft.net.http.servereq1.1.0
microsoft.net.http.servereq1.1.2
microsoft.aspnetcore.server.weblistenereq1.0.4
microsoft.aspnetcore.server.weblistenereq1.1.3
microsoft.net.http.servereq1.0.2
microsoft.aspnetcore.server.weblistenereq1.0.5
microsoft.aspnetcore.server.weblistenereq1.1.1

Name	Operator	Version
microsoft.net.http.server	eq	1.0.1
microsoft.aspnetcore.server.weblistener	eq	1.0.3
microsoft.aspnetcore.server.httpsys	eq	2.0.0
microsoft.net.http.server	eq	1.1.0
microsoft.net.http.server	eq	1.1.2
microsoft.aspnetcore.server.weblistener	eq	1.0.4
microsoft.aspnetcore.server.weblistener	eq	1.1.3
microsoft.net.http.server	eq	1.0.2
microsoft.aspnetcore.server.weblistener	eq	1.0.5
microsoft.aspnetcore.server.weblistener	eq	1.1.1