Denial Of Service (DoS)

2022-09-1612:26:43

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

70.9%

JSON

.NET Core is vulnerable to denial of service. The vulnerability exists due to a stack overflow which allows an attacker to send a customized payload that is parsed during model binding and cause an application crash.

CPENameOperatorVersion
microsoft.aspnetcore.app.runtime.linux-musl-armle6.0.8
microsoft.aspnetcore.app.runtime.linux-musl-arm64le3.1.28
microsoft.aspnetcore.app.runtime.linux-musl-arm64le6.0.8
microsoft.aspnetcore.app.runtime.linux-armle3.1.28
microsoft.aspnetcore.app.runtime.linux-armle6.0.8
microsoft.aspnetcore.app.runtime.linux-arm64le3.1.28
microsoft.aspnetcore.app.runtime.linux-arm64le6.0.8
microsoft.aspnetcore.app.runtime.linux-musl-x64le3.1.28
microsoft.aspnetcore.app.runtime.linux-musl-x64le6.0.8
microsoft.aspnetcore.app.runtime.linux-x64le3.1.28

Name	Operator	Version
microsoft.aspnetcore.app.runtime.linux-musl-arm	le	6.0.8
microsoft.aspnetcore.app.runtime.linux-musl-arm64	le	3.1.28
microsoft.aspnetcore.app.runtime.linux-musl-arm64	le	6.0.8
microsoft.aspnetcore.app.runtime.linux-arm	le	3.1.28
microsoft.aspnetcore.app.runtime.linux-arm	le	6.0.8
microsoft.aspnetcore.app.runtime.linux-arm64	le	3.1.28
microsoft.aspnetcore.app.runtime.linux-arm64	le	6.0.8
microsoft.aspnetcore.app.runtime.linux-musl-x64	le	3.1.28
microsoft.aspnetcore.app.runtime.linux-musl-x64	le	6.0.8
microsoft.aspnetcore.app.runtime.linux-x64	le	3.1.28