Описание
ASP.NET Core Denial of Service Vulnerability
FAQ
How could an attacker exploit this vulnerability?
This vulnerability could be exploited if http requests to .NET 8 RC 1 running on IIS InProcess hosting model are cancelled. Threads counts would increase and an OutOfMemoryException is possible.
According to the CVSS metric, successful exploitation of this vulnerability could lead to a total loss of availability (A:H). What does that mean for this vulnerability?
If an attacker was able to successfully exploit the vulnerability the attack might result in a total loss of availability.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Microsoft Visual Studio 2022 version 17.2 | ||
| Microsoft Visual Studio 2022 version 17.4 | ||
| Microsoft Visual Studio 2022 version 17.6 | ||
| Microsoft Visual Studio 2022 version 17.7 | ||
| ASP.NET Core 8.0 | ||
| .NET 8.0 |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
8.2 High
CVSS3
Связанные уязвимости
Уязвимость программной платформы ASP.NET Core, связанная с некорректной зачисткой или освобождением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
8.2 High
CVSS3