Denial of service in ASP.NET Core · CVE-2020-0602 · GitHub Advisory Database · GitHub

Denial of service in ASP.NET Core

Moderate severity GitHub Reviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

Microsoft.AspNetCore.All (NuGet)

Affected versions

>= 2.1.0, < 2.1.15

Patched versions

2.1.15

Microsoft.AspNetCore.App (NuGet)

= 3.1.0

= 3.0.0

>= 2.1.0, < 2.1.15

3.1.1

3.0.1

2.1.15

Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet)

>= 3.1.0, < 3.1.1

3.1.1

Microsoft.AspNetCore.App.Runtime.linux-arm64 (NuGet)

>= 3.1.0, < 3.1.1

3.1.1

Microsoft.AspNetCore.App.Runtime.linux-musl-x64 (NuGet)

>= 3.1.0, < 3.1.1

3.1.1

Microsoft.AspNetCore.App.Runtime.linux-x64 (NuGet)

>= 3.1.0, < 3.1.1

3.1.1

Microsoft.AspNetCore.App.Runtime.osx-x64 (NuGet)

>= 3.1.0, < 3.1.1

3.1.1

Microsoft.AspNetCore.App.Runtime.win-arm (NuGet)

>= 3.1.0, < 3.1.1

3.1.1

Microsoft.AspNetCore.App.Runtime.win-x64 (NuGet)

>= 3.1.0, < 3.1.1

3.1.1

Microsoft.AspNetCore.App.Runtime.win-x86 (NuGet)

>= 3.1.0, < 3.1.1

3.1.1

Microsoft.AspNetCore.Http.Connections (NuGet)

>= 1.0.0, < 1.0.15

1.0.15

Description

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

References

Published by the National Vulnerability Database

Jan 14, 2020

Published to the GitHub Advisory Database May 24, 2022

Reviewed Jul 7, 2022

Last updated Jan 30, 2023