Non notée
CVE-2020-1108 A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests
Description
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application. The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| .NET Core | 3.1 | Pas de correctif indiqué |
| .NET Core | 2.1 | Pas de correctif indiqué |
| Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) | Versions non publiées | |
| Microsoft Visual Studio 2019 | 16.0 | Pas de correctif indiqué |
| Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) 16.0 | 16.0 → dernières | Pas de correctif indiqué |
| Microsoft Visual Studio 2019 version 16.5 16.0 | 16.0 → dernières | Pas de correctif indiqué |
| .NET Core 5.0 | Versions non publiées | |
| PowerShell Core | 6.2 | Pas de correctif indiqué |
| PowerShell 7.0 7.0 | 7.0.0 → dernières | Pas de correctif indiqué |
Afficher les 71 autres branches Masquer les 71 autres branches
Références
- .NET Core & .NET Framework Denial of Service Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de .NET Core
Les 14 CVE de .NET Core →
CVE-2020-1147
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
7.8
Élevée
CVE-2020-0606
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a…
Non notée
CVE-2020-0605
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a…
Non notée
CVE-2019-1301
A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of…
Non notée