| Package | Affected versions | Patched versions |
|---|---|---|
| Microsoft.AspNetCore.App.Runtime.linux-arm | ≥ 3.1.0, < 3.1.11≥ 5.0.0, < 5.0.2 | 3.1.115.0.2 |
| Microsoft.AspNetCore.App.Runtime.linux-arm64 | ≥ 3.1.0, < 3.1.11≥ 5.0.0, < 5.0.2 | 3.1.115.0.2 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-arm | ≥ 5.0.1, < 5.0.2 | 5.0.2 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | ≥ 3.1.0, < 3.1.11≥ 5.0.0, < 5.0.2 | 3.1.115.0.2 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | ≥ 3.1.0, < 3.1.11≥ 5.0.0, < 5.0.2 | 3.1.115.0.2 |
| Microsoft.AspNetCore.App.Runtime.linux-x64 | ≥ 3.1.0, < 3.1.11≥ 5.0.0, < 5.0.2 | 3.1.115.0.2 |
| Microsoft.AspNetCore.App.Runtime.osx-x64 | ≥ 3.1.0, < 3.1.11≥ 5.0.0, < 5.0.2 | 3.1.115.0.2 |
| Microsoft.AspNetCore.App.Runtime.win-arm | ≥ 3.1.0, < 3.1.11≥ 5.0.0, < 5.0.2 | 3.1.115.0.2 |
| Microsoft.AspNetCore.App.Runtime.win-arm64 | ≥ 3.1.0, < 3.1.11≥ 5.0.0, < 5.0.2 | 3.1.115.0.2 |
| Microsoft.AspNetCore.App.Runtime.win-x64 | ≥ 3.1.0, < 3.1.11≥ 5.0.0, < 5.0.2 | 3.1.115.0.2 |
| Microsoft.AspNetCore.App.Runtime.win-x86 | ≥ 3.1.0, < 3.1.11≥ 5.0.0, < 5.0.2 | 3.1.115.0.2 |
| Microsoft.AspNetCore.Server.Kestrel.Core | < 2.1.25 | 2.1.25 |
| asp.net core | ≥ 3.1, ≤ 3.1.10≥ 5.0, ≤ 5.0.1 | |
| visual studio 2019 | ≥ 16.0, ≤ 16.8 |
A denial-of-service vulnerability exists in the way Kestrel parses HTTP/2 requests. The security update addresses the vulnerability by fixing the way the Kestrel parses HTTP/2 requests. Users are advised to upgrade.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free