CVEvulnerability
CVE-2019-0548
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-01-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-19
Description
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.
Affected configurations
• microsoft asp.net core 2.1
• microsoft asp.net core 2.2
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/106410 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2019:0040 Third Party Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0548 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/106410 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2019:0040 Third Party Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0548 Patch, Vendor Advisory