CVE Vulnerabilities

CVE-2019-0548

Published: Jan 08, 2019 | Modified: Jan 15, 2019
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
5.9 MODERATE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka ASP.NET Core Denial of Service Vulnerability. This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.

Affected Software

Name Vendor Start Version End Version
Asp.net_core Microsoft 2.1 (including) 2.1 (including)
Asp.net_core Microsoft 2.2 (including) 2.2 (including)
.NET Core on Red Hat Enterprise Linux RedHat rh-dotnet21-0:2.1-6.el7 *
.NET Core on Red Hat Enterprise Linux RedHat rh-dotnet21-dotnet-0:2.1.503-1.el7 *
.NET Core on Red Hat Enterprise Linux RedHat rh-dotnet22-0:2.2-2.el7 *
.NET Core on Red Hat Enterprise Linux RedHat rh-dotnet22-dotnet-0:2.2.102-1.el7 *

References