| Package | Affected versions | Patched versions |
|---|---|---|
| Microsoft.NETCore.App | ≥ 1.0.0, < 2.0.3 | 2.0.3 |
| System.Security.Cryptography.X509Certificates | ≥ 4.0.0, < 4.1.2 | 4.1.2 |
| aspnetcore | = 1.0= 1.1= 2.0 |
.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka ".NET CORE Denial Of Service Vulnerability".
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free