Fluid Attacks Database

Description

Denial of service in ASP.NET Core A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
nuget	microsoft.aspnetcore.dataprotection.azurestorage	>=2.1.0 <2.1.13 \|\| >=2.2.0 <2.2.7	2.1.13, 2.2.7
nuget	microsoft.aspnetcore.all	>=2.1.0 <2.1.13 \|\| >=2.2.0 <2.2.7	2.1.13, 2.2.7
nuget	microsoft.data.odata	>=0 <5.8.4	5.8.4

Aliases

1. CVE-2018-82692. NVD-2018-82693. OSV-2018-82694. GHSA-mv2r-q4g5-j8q55. GCVE-2018-8269

References

1. https://github.com/aspnet/Announcements/issues/3852. https://github.com/github/advisory-database/issues/3023. https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-82694. https://www.exploit-db.com/exploits/46101

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.