PT-2019-2167 · Microsoft +2 · Net Core +3

🗓️ 14 May 2019 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Regex processing error in .NET Core and .NET Framework could cause denial of service.

Reporter	Title	Published	Views	Family All 142
IBM Security Bulletins	Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Robotic Process Automation may be affected by multiple vulnerabilities in open source components (CVE-2019-0820, CVE-2020-15522, CVE-2021-43569)	27 Jun 202216:39	–	ibm
BDU FSTEC	The vulnerability of the NuGet package management system allows a hacker to alter the folder structure of a package.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	Vulnerability of .NET Core and Microsoft .NET Framework software platforms, related to errors in regular expression processing, allowing attackers to trigger service failures.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of .NET Core, Microsoft.NET Framework, and PowerShell Core automation frameworks, related to errors in request processing, allowing attackers to trigger service failures.	14 Jun 201900:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of .NET Core, Microsoft.NET Framework, and PowerShell Core automation frameworks, related to errors in request processing, allowing attackers to trigger service failures.	14 Jun 201900:00	–	bdu_fstec
Tenable Nessus	CentOS 8 : dotnet (CESA-2019:1259)	29 Jan 202100:00	–	nessus
Tenable Nessus	Oracle Linux 8 : dotnet (ELSA-2019-1259)	12 Aug 201900:00	–	nessus
Tenable Nessus	Photon OS 4.0: Dotnet PHSA-2025-4.0-0804	22 May 202500:00	–	nessus
Tenable Nessus	RHEL 7 : .NET Core on Red Hat Enterprise Linux security update for March 2019 (Important) (RHSA-2019:0544)	18 Mar 201900:00	–	nessus

Source	Link
osv	www.osv.dev/vulnerability/CVE-2019-0820
bdu	www.bdu.fstec.ru/vul/2019-01186
cve	www.cve.org/CVERecord
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/680637
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820
bdu	www.bdu.fstec.ru/vul/2019-02034
osv	www.osv.dev/vulnerability/GHSA-cmhx-cq75-c4mj
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
linux	www.linux.oracle.com/errata/ELSA-2019-1259.html

02 Feb 2023 00:00Current

7High risk

Vulners AI Score7

CVSS 3.17.5

CVSS 25

CVSS 37.5

EPSS0.05876

regex processing denial of service remote attack