Описание
Denial of service in ASP.NET Core
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2020-0602
- https://github.com/aspnet/Announcements/issues/402
- https://github.com/github/advisory-database/issues/302
- https://access.redhat.com/errata/RHSA-2020:0130
- https://access.redhat.com/errata/RHSA-2020:0134
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0602
Пакеты
Microsoft.AspNetCore.All
>= 2.1.0, < 2.1.15
2.1.15
Microsoft.AspNetCore.App
= 3.1.0
3.1.1
Microsoft.AspNetCore.App
= 3.0.0
3.0.1
Microsoft.AspNetCore.App
>= 2.1.0, < 2.1.15
2.1.15
Microsoft.AspNetCore.Http.Connections
>= 1.0.0, < 1.0.15
1.0.15
Microsoft.AspNetCore.App.Runtime.linux-arm
>= 3.1.0, < 3.1.1
3.1.1
Microsoft.AspNetCore.App.Runtime.linux-arm64
>= 3.1.0, < 3.1.1
3.1.1
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
>= 3.1.0, < 3.1.1
3.1.1
Microsoft.AspNetCore.App.Runtime.linux-x64
>= 3.1.0, < 3.1.1
3.1.1
Microsoft.AspNetCore.App.Runtime.osx-x64
>= 3.1.0, < 3.1.1
3.1.1
Microsoft.AspNetCore.App.Runtime.win-arm
>= 3.1.0, < 3.1.1
3.1.1
Microsoft.AspNetCore.App.Runtime.win-x64
>= 3.1.0, < 3.1.1
3.1.1
Microsoft.AspNetCore.App.Runtime.win-x86
>= 3.1.0, < 3.1.1
3.1.1
Связанные уязвимости
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
Уязвимость программной платформы ASP.NET Core, связанная с ошибками обработки запросов, позволяющая нарушителю вызвать отказ в обслуживании
ELSA-2020-0130: .NET Core on Red Hat Enterprise Linux security and bug fix update (CRITICAL)