Denial Of Service (DoS)

2019-01-0904:51:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

70.5%

JSON

ASP.NET Core is vulnerable to denial of service. Web requests are not handled properly, which would allow a remote attacker to cause a denial of service condition via a crafted request to the .NET Core application.

CPENameOperatorVersion
microsoft.aspnetcore.websocketseq2.2.0
microsoft.aspnetcore.websocketsle2.1.1
microsoft.aspnetcore.server.kestrel.corele2.1.3
system.net.websockets.websocketprotocolle4.5.2
microsoft.netcore.appeq2.2.0
microsoft.netcore.apple2.1.6
microsoft.aspnetcore.appeq2.2.0
microsoft.aspnetcore.apple2.1.6
microsoft.aspnetcore.alleq2.2.0
microsoft.aspnetcore.allle2.1.6

Name	Operator	Version
microsoft.aspnetcore.websockets	eq	2.2.0
microsoft.aspnetcore.websockets	le	2.1.1
microsoft.aspnetcore.server.kestrel.core	le	2.1.3
system.net.websockets.websocketprotocol	le	4.5.2
microsoft.netcore.app	eq	2.2.0
microsoft.netcore.app	le	2.1.6
microsoft.aspnetcore.app	eq	2.2.0
microsoft.aspnetcore.app	le	2.1.6
microsoft.aspnetcore.all	eq	2.2.0
microsoft.aspnetcore.all	le	2.1.6