Описание
.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka ".NET CORE Denial Of Service Vulnerability".
Дополнительная информация
Статус:
Low
https://bugzilla.redhat.com/show_bug.cgi?id=1512992Core: DoS via bad certificate
5.9 Medium
CVSS3
Связанные уязвимости
CVSS3: 7.5
nvd
больше 7 лет назад
.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka ".NET CORE Denial Of Service Vulnerability".
5.9 Medium
CVSS3