Lucene search

K
nvd[email protected]NVD:CVE-2020-1108
HistoryMay 21, 2020 - 11:15 p.m.

CVE-2020-1108

2020-05-2123:15:14
web.nvd.nist.gov
7

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

50.4%

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka ‘.NET Core & .NET Framework Denial of Service Vulnerability’.

Affected configurations

Nvd
Node
microsoft.netMatch5.0preview1
OR
microsoft.netMatch5.0preview2
OR
microsoft.netMatch5.0preview3
OR
microsoft.net_coreRange2.1–2.1.18
OR
microsoft.net_coreRange3.0–3.1.4
Node
microsoftwindows_server_2008Match-sp2x64
OR
microsoftwindows_server_2008Match-sp2x86
AND
microsoft.net_frameworkMatch2.0sp2
OR
microsoft.net_frameworkMatch3.0sp2
OR
microsoft.net_frameworkMatch4.6
Node
microsoft.net_frameworkMatch3.5
AND
microsoftwindows_8.1Match-x64
OR
microsoftwindows_8.1Match-x86
Node
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.5.2
OR
microsoft.net_frameworkMatch4.6
OR
microsoft.net_frameworkMatch4.6.1
OR
microsoft.net_frameworkMatch4.6.2
OR
microsoft.net_frameworkMatch4.7
OR
microsoft.net_frameworkMatch4.7.1
OR
microsoft.net_frameworkMatch4.7.2
OR
microsoft.net_frameworkMatch4.8
AND
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
Node
microsoftwindows_10Match1607x64
OR
microsoftwindows_10Match1607x86
AND
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.6.2
OR
microsoft.net_frameworkMatch4.7
OR
microsoft.net_frameworkMatch4.7.1
OR
microsoft.net_frameworkMatch4.7.2
OR
microsoft.net_frameworkMatch4.8
Node
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.6.2
OR
microsoft.net_frameworkMatch4.7
OR
microsoft.net_frameworkMatch4.7.1
OR
microsoft.net_frameworkMatch4.7.2
OR
microsoft.net_frameworkMatch4.8
AND
microsoftwindows_server_2016
Node
microsoftwindows_10Match-x64
OR
microsoftwindows_10Match-x86
AND
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.6
OR
microsoft.net_frameworkMatch4.6.1
OR
microsoft.net_frameworkMatch4.6.2
Node
microsoftwindows_10Match1709x64
OR
microsoftwindows_10Match1709x86
AND
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.7.1
OR
microsoft.net_frameworkMatch4.7.2
OR
microsoft.net_frameworkMatch4.8
Node
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.7.1
OR
microsoft.net_frameworkMatch4.7.2
AND
microsoftwindows_10Match1709arm64
Node
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.7.2
OR
microsoft.net_frameworkMatch4.8
AND
microsoftwindows_10Match1803x64
OR
microsoftwindows_10Match1803x86
Node
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.7.2
OR
microsoft.net_frameworkMatch4.8
AND
microsoftwindows_10Match1809
OR
microsoftwindows_server_2019Match-
Node
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.8
AND
microsoftwindows_10Match1909x64
OR
microsoftwindows_10Match1909x86
Node
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.8
AND
microsoftwindows_10Match1903x64
OR
microsoftwindows_10Match1903x86
Node
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.8
AND
microsoftwindows_10Match1903arm64
OR
microsoftwindows_10Match1909arm64
Node
microsoft.net_frameworkMatch3.5.1
OR
microsoft.net_frameworkMatch4.6
OR
microsoft.net_frameworkMatch4.6.1
OR
microsoft.net_frameworkMatch4.6.2
OR
microsoft.net_frameworkMatch4.7
OR
microsoft.net_frameworkMatch4.7.1
OR
microsoft.net_frameworkMatch4.7.2
OR
microsoft.net_frameworkMatch4.8
AND
microsoftwindows_7Match-sp1x64
OR
microsoftwindows_7Match-sp1x86
Node
microsoft.net_frameworkMatch4.5.2
OR
microsoft.net_frameworkMatch4.6
OR
microsoft.net_frameworkMatch4.6.1
OR
microsoft.net_frameworkMatch4.6.2
OR
microsoft.net_frameworkMatch4.7
OR
microsoft.net_frameworkMatch4.7.1
OR
microsoft.net_frameworkMatch4.7.2
AND
microsoftwindows_8.1Match-x64
Node
microsoft.net_frameworkMatch4.5.2
OR
microsoft.net_frameworkMatch4.6
OR
microsoft.net_frameworkMatch4.6.1
OR
microsoft.net_frameworkMatch4.6.2
OR
microsoft.net_frameworkMatch4.7
OR
microsoft.net_frameworkMatch4.7.1
OR
microsoft.net_frameworkMatch4.7.2
OR
microsoft.net_frameworkMatch4.8
AND
microsoftwindows_8.1Match-x86
Node
microsoft.net_frameworkMatch4.5.2
AND
microsoftwindows_server_2008Match-sp2x86
OR
microsoftwindows_server_2012Matchr2
Node
microsoft.net_frameworkMatch4.5.2
AND
microsoftwindows_server_2008Match-sp2x64
Node
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.7.2
AND
microsoftwindows_10Match1803arm64
Node
microsoft.net_frameworkMatch4.5.2
AND
microsoftwindows_7Match-sp1x64
OR
microsoftwindows_7Match-sp1x86
Node
microsoft.net_frameworkMatch4.5.2
OR
microsoft.net_frameworkMatch4.6
OR
microsoft.net_frameworkMatch4.6.1
OR
microsoft.net_frameworkMatch4.6.2
OR
microsoft.net_frameworkMatch4.7
OR
microsoft.net_frameworkMatch4.7.1
OR
microsoft.net_frameworkMatch4.7.2
OR
microsoft.net_frameworkMatch4.8
AND
microsoftwindows_rt_8.1Match-
Node
microsoft.net_coreMatch2.1
OR
microsoft.net_coreMatch3.1
OR
microsoftvisual_studio_2017Match15.9
OR
microsoftvisual_studio_2019Match16.0
OR
microsoftvisual_studio_2019Match16.4
OR
microsoftvisual_studio_2019Match16.5
Node
microsoftpowershellMatch7.0
OR
microsoftpowershell_coreMatch6.2
VendorProductVersionCPE
microsoft.net5.0cpe:2.3:a:microsoft:.net:5.0:preview1:*:*:*:*:*:*
microsoft.net5.0cpe:2.3:a:microsoft:.net:5.0:preview2:*:*:*:*:*:*
microsoft.net5.0cpe:2.3:a:microsoft:.net:5.0:preview3:*:*:*:*:*:*
microsoft.net_core*cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*
microsoftwindows_server_2008-cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*
microsoftwindows_server_2008-cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*
microsoft.net_framework2.0cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*
microsoft.net_framework3.0cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
microsoft.net_framework4.6cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*
microsoft.net_framework3.5cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*
Rows per page:
1-10 of 521

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

50.4%