~ / search / GHSA-6px8-22w5-w334

GHSA-6px8-22w5-w334

Denial of service in ASP.NET Core

Source: GitHub Advisory Database (reviewed) High CVE-2019-0564

Packages

EcosystemPackageAffectedFixed in
NuGet Microsoft.AspNetCore.WebSockets >= 2.2.0, < 2.2.1 2.2.1
NuGet Microsoft.AspNetCore.WebSockets >= 2.1.0, < 2.1.7 2.1.7
NuGet Microsoft.AspNetCore.Server.Kestrel.Core >= 2.1.0, < 2.1.7 2.1.7
NuGet System.Net.WebSockets.WebSocketProtocol >= 4.5.0, < 4.5.3 4.5.3
NuGet Microsoft.NETCore.App >= 2.2.0, < 2.2.1 2.2.1
NuGet Microsoft.NETCore.App >= 2.1.0, < 2.1.7 2.1.7
NuGet Microsoft.AspNetCore.App >= 2.2.0, < 2.2.1 2.2.1
NuGet Microsoft.AspNetCore.App >= 2.1.0, < 2.1.7 2.1.7
NuGet Microsoft.AspNetCore.All >= 2.2.0, < 2.2.1 2.2.1
NuGet Microsoft.AspNetCore.All >= 2.1.0, < 2.1.7 2.1.7

Details

As written in the advisory (Markdown source, shown as plain text).

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.

References

External links from the advisory. They lead to third-party sites.