Описание
.NET Denial of Service Vulnerability
A vulnerability was found in dotnet’s ASP.NET Core Krestel when pooling HTTP/2 and HTTP/3 headers. This flaw allows a remote, unauthenticated attacker to cause a denial of service.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| .NET Core 3.1 on Red Hat Enterprise Linux | rh-dotnet31 | Not affected | ||
| Red Hat Enterprise Linux 8 | dotnet3.1 | Not affected | ||
| Red Hat Enterprise Linux 9 | dotnet3.1 | Not affected | ||
| .NET Core on Red Hat Enterprise Linux | rh-dotnet50-dotnet | Fixed | RHSA-2022:0499 | 09.02.2022 |
| .NET Core on Red Hat Enterprise Linux | rh-dotnet60-dotnet | Fixed | RHSA-2022:0500 | 09.02.2022 |
| Red Hat Enterprise Linux 8 | dotnet5.0 | Fixed | RHSA-2022:0495 | 09.02.2022 |
| Red Hat Enterprise Linux 8 | dotnet6.0 | Fixed | RHSA-2022:0496 | 09.02.2022 |
Показывать по
10
Дополнительная информация
Статус:
Important
Дефект:
CWE-770
https://bugzilla.redhat.com/show_bug.cgi?id=2051490dotnet: ASP.NET Core Krestel HTTP headers pooling denial of service
EPSS
Процентиль: 82%
0.01714
Низкий
7.5 High
CVSS3
EPSS
Процентиль: 82%
0.01714
Низкий
7.5 High
CVSS3