CVE-2020-1108

7.5HIGH

Key Information:

Vendor: Microsoft
Status: .net Core; Microsoft Visual Studio 2017 Version 15.9 (includes 15.1 - 15.8); Microsoft Visual Studio 2019; Microsoft Visual Studio 2019 Version 16.4 (includes 16.0 - 16.3)
Vendor: CVE Published:; 21 May 2020

Summary

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.

Affected Version(s)

.NET Core 3.1

.NET Core 2.1

.NET Core 5.0 = unspecified

References

https://portal.msrc.microsoft.com/en-US/security-guidance...

x_refsource_MISC

EPSS Score

0% chance of being exploited in the next 30 days.

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
May 21, 2020
Vulnerability Reserved
Nov 4, 2019

Collectors

NVD DatabaseMitre Database