Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.Server.Kestrel.Core, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions, and Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv

概要

参考情報

• aspnet/Announcements · WEB
• GitHub Advisory GHSA-3m2r-q8x3-xmf7 · ADVISORY

Microsoft.AspNetCore.All のその他の脆弱性

• CVE-2020-1597高 7.5A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vuln…
• CVE-2020-0603高 8.8A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who su…
• CVE-2020-0602高 7.5A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerabilit…
• CVE-2019-1075中 6.1A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.
• CVE-2019-0564高 7.5A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerabilit…