Denial of service in ASP.NET Core

2022-05-1401:41:32

GitHub Advisory Database

github.com

0.003 Low

EPSS

Percentile

68.5%

JSON

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka “ASP.NET Core Denial of Service Vulnerability.” This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.

CPENameOperatorVersion
microsoft.aspnetcore.alllt2.1.7
microsoft.aspnetcore.alleq2.2.0
microsoft.aspnetcore.applt2.1.7
microsoft.aspnetcore.appeq2.2.0
microsoft.netcore.applt2.1.7
microsoft.netcore.appeq2.2.0
system.net.websockets.websocketprotocollt4.5.3
microsoft.aspnetcore.server.kestrel.corelt2.1.7
microsoft.aspnetcore.websocketslt2.1.7
microsoft.aspnetcore.websocketseq2.2.0

Name	Operator	Version
microsoft.aspnetcore.all	lt	2.1.7
microsoft.aspnetcore.all	eq	2.2.0
microsoft.aspnetcore.app	lt	2.1.7
microsoft.aspnetcore.app	eq	2.2.0
microsoft.netcore.app	lt	2.1.7
microsoft.netcore.app	eq	2.2.0
system.net.websockets.websocketprotocol	lt	4.5.3
microsoft.aspnetcore.server.kestrel.core	lt	2.1.7
microsoft.aspnetcore.websockets	lt	2.1.7
microsoft.aspnetcore.websockets	eq	2.2.0