GHSA-xcvr-qv8h-m7xw

.NET Core Denial of Service Vulnerability

En bref

Publiée: 2022-05-13 01:07 UTC
Mise à jour: 2024-11-28 05:41 UTC
CVE: CVE-2018-0875
CVSS_V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

.NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability".

Paquets affectés

Paquet	Versions
NuGet · Microsoft.NETCore.Jit	introduced 2.0.0, fixed 2.0.6
NuGet · Microsoft.NETCore.Jit	introduced 1.1.0, fixed 1.1.7
NuGet · Microsoft.NETCore.Jit	introduced 0, fixed 1.0.12

Références

https://nvd.nist.gov/vuln/detail/CVE-2018-0875 ADVISORY
https://github.com/dotnet/announcements/issues/62 WEB
https://access.redhat.com/errata/RHSA-2018:0522 WEB
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0875 WEB
http://www.securityfocus.com/bid/103225 WEB
http://www.securitytracker.com/id/1040505 WEB

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — GitHub Advisory Database