| Package | Affected versions | Patched versions |
|---|---|---|
| Microsoft.AspNetCore.All | ≥ 2.0.0, < 2.0.9≥ 2.1.0, < 2.1.2 | 2.0.92.1.2 |
| Microsoft.AspNetCore.App | ≥ 2.1.0, < 2.1.2 | 2.1.2 |
| Microsoft.AspNetCore.Server.Kestrel.Core | ≥ 2.0.0, < 2.0.4≥ 2.1.0, < 2.1.2 | 2.0.42.1.2 |
Microsoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated. An attacker who successfully exploited this vulnerability could cause a denial of service attack.
The update addresses the vulnerability by correcting how ASP.NET Core handles such requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free