Fluid Attacks Database

Description

.NET Core & .NET Framework Denial of Service Vulnerability A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
nuget	powershell	=7.0	7.1.0
nuget	microsoft.netcore.app	>=2.1.0 <2.1.18	2.1.18
nuget	microsoft.netcore.app.runtime.linux-arm	>=3.1.0 <3.1.4	3.1.4
nuget	microsoft.netcore.app.runtime.linux-arm64	>=3.1.0 <3.1.4	3.1.4
nuget	microsoft.netcore.app.runtime.linux-musl-arm64	>=3.1.0 <3.1.4	3.1.4
nuget	microsoft.netcore.app.runtime.linux-musl-x64	>=3.1.0 <3.1.4	3.1.4
nuget	microsoft.netcore.app.runtime.linux-x64	>=3.1.0 <3.1.4	3.1.4
nuget	microsoft.netcore.app.runtime.osx-x64	>=3.1.0 <3.1.4	3.1.4
nuget	microsoft.netcore.app.runtime.rhel.6-x64	>=3.1.0 <3.1.4	3.1.4
nuget	microsoft.netcore.app.runtime.win-arm64	>=3.1.0 <3.1.4	3.1.4

1-10 of 15

Aliases

1. CVE-2020-11082. NVD-2020-11083. OSV-2020-11084. GCVE-2020-11085. PORTAL-CVE-2020-1108

References

1. https://github.com/dotnet/announcements/issues/1572. https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1108

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.