Denial Of Service (DoS)

🗓️ 14 Jan 2021 04:52:37Reported by Veracode Vulnerability DatabaseType

dotnet vulnerability to denial of service through ASP.NET Core Callbacks causing Krestel deadlock in HTTP

Reporter	Title	Published	Views	Family All 69
ALT Linux	Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.11-alt1	28 Jan 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.11-alt1	28 Jan 202100:00	–	altlinux
ArchLinux	[ASA-202103-16] dotnet-runtime: multiple issues	25 Mar 202100:00	–	archlinux
ArchLinux	[ASA-202103-17] dotnet-sdk: multiple issues	25 Mar 202100:00	–	archlinux
BDU FSTEC	The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment lies in insufficient validation of input data, allowing attackers to trigger service failures.	20 Jan 202100:00	–	bdu_fstec
Tenable Nessus	CentOS 8 : dotnet5.0 (CESA-2021:0094)	1 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 8 : dotnet3.1 (CESA-2021:0095)	1 Feb 202100:00	–	nessus
Tenable Nessus	Fedora 32 : dotnet3.1 (2021-77a4202036)	22 Jan 202100:00	–	nessus
Tenable Nessus	Fedora 33 : dotnet3.1 (2021-fb078913dd)	22 Jan 202100:00	–	nessus
Tenable Nessus	MiracleLinux 8 : dotnet5.0-5.0.103-1.0.1.el8 (AXSA:2021-1546:02)	19 Jan 202600:00	–	nessus

Vulners

Node

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1723
access	www.access.redhat.com/errata/RHSA-2021:0114
access	www.access.redhat.com/security/updates/classification/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/RRXHERXW4KR5WCP76UDW5PC7GX3YQLUW/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/3L27CGRVEWUPELNJOGTCW6GLEDBECB4B/
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1723

29 Dec 2023 19:28Current

2.8Low risk

Vulners AI Score2.8

CVSS 3.17.5

CVSS 25

EPSS0.0405