| Package | Affected versions | Patched versions |
|---|---|---|
| Microsoft.AspNetCore.All | ≥ 2.0.0, < 2.0.8 | 2.0.8 |
| Microsoft.AspNetCore.Server.Kestrel.Core | ≥ 2.0.0, < 2.0.3 | 2.0.3 |
| Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions | ≥ 2.0.0, < 2.0.3 | 2.0.3 |
| Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv | ≥ 2.0.0, < 2.0.3 | 2.0.3 |
Microsoft made an internal discovery of a security vulnerability in version 2.x of ASP.NET Core where a specially crafted request can cause excess resource consumption in Kestrel.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free