Описание
Denial of service in ASP.NET Core
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2019-0564
- https://github.com/aspnet/Announcements/issues/334
- https://github.com/github/advisory-database/issues/302
- https://access.redhat.com/errata/RHSA-2019:0040
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0564
- http://www.securityfocus.com/bid/106413
Пакеты
Microsoft.AspNetCore.WebSockets
= 2.2.0
2.2.1
Microsoft.AspNetCore.WebSockets
>= 2.1.0, < 2.1.7
2.1.7
Microsoft.AspNetCore.Server.Kestrel.Core
>= 2.1.0, < 2.1.7
2.1.7
System.Net.WebSockets.WebSocketProtocol
>= 4.5.0, < 4.5.3
4.5.3
Microsoft.NETCore.App
= 2.2.0
2.2.1
Microsoft.NETCore.App
>= 2.1.0, < 2.1.7
2.1.7
Microsoft.AspNetCore.App
= 2.2.0
2.2.1
Microsoft.AspNetCore.App
>= 2.1.0, < 2.1.7
2.1.7
Microsoft.AspNetCore.All
= 2.2.0
2.2.1
Microsoft.AspNetCore.All
>= 2.1.0, < 2.1.7
2.1.7
Связанные уязвимости
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.
Уязвимость программной платформы .NET Core, связанная с ошибками освобождения ресурсов, позволяющая нарушителю вызвать отказ в обслуживании