Fluid Attacks Database

Description

ASP.NET Core Denial of Service Vulnerability A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka ASP.NET Core Denial of Service Vulnerability.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
nuget	microsoft.aspnetcore.all	>=2.1.0 <2.1.21	2.1.21
nuget	microsoft.aspnetcore.app	>=2.1.0 <2.1.21	2.1.21
nuget	microsoft.aspnetcore.app.runtime.linux-arm	>=3.1.0 <3.1.7	3.1.7
nuget	microsoft.aspnetcore.app.runtime.linux-arm64	>=3.1.0 <3.1.7	3.1.7
nuget	microsoft.aspnetcore.app.runtime.linux-musl-x64	>=3.1.0 <3.1.7	3.1.7
nuget	microsoft.aspnetcore.app.runtime.linux-x64	>=3.1.0 <3.1.7	3.1.7
nuget	microsoft.aspnetcore.app.runtime.osx-x64	>=3.1.0 <3.1.7	3.1.7
nuget	microsoft.aspnetcore.app.runtime.win-arm	>=3.1.0 <3.1.7	3.1.7
nuget	microsoft.aspnetcore.app.runtime.win-x64	>=3.1.0 <3.1.7	3.1.7
nuget	microsoft.aspnetcore.app.runtime.win-x86	>=3.1.0 <3.1.7	3.1.7

1-10 of 13

Aliases

1. CVE-2020-15972. NVD-2020-15973. OSV-2020-15974. GCVE-2020-1597

References

1. https://github.com/dotnet/announcements/issues/1622. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WH5FQ5VT3JGHXFXOETHCTBWJUIAPGHHT3. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZW4CBI26KSO3PRL3HLVVISXPPOYUHSXO4. https://lists.fedoraproject.org/archives/list/[email protected]/message/WH5FQ5VT3JGHXFXOETHCTBWJUIAPGHHT5. https://lists.fedoraproject.org/archives/list/[email protected]/message/ZW4CBI26KSO3PRL3HLVVISXPPOYUHSXO6. https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1597