Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2017-11883

Опубликовано: 14 нояб. 2017
Источник: msrc
EPSS Средний

Описание

ASP.NET Core Denial of Service Vulnerability

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication.

A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application.

The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests.

Обновления

ПродуктСтатьяОбновление
ASP.NET Core 2.0
ASP.NET Core 1.1
ASP.NET Core 1.0

Показывать по

Возможность эксплуатации

Publicly Disclosed

Yes

Exploited

No

Latest Software Release

Exploitation Less Likely

Older Software Release

Exploitation Less Likely

DOS

Permanent

EPSS

Процентиль: 94%
0.16008
Средний

Связанные уязвимости

CVSS3: 7.5
redhat
больше 7 лет назад

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability".

CVSS3: 7.5
nvd
больше 7 лет назад

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability".

CVSS3: 7.5
github
около 3 лет назад

Denial of service in ASP.NET Core

EPSS

Процентиль: 94%
0.16008
Средний