GitHub Advisoryadvisory · NuGet

GHSA-4jxx-4qxw-prxm Denial of service in ASP.NET Core

HIGH Published 2022-05-24 Modified 2022-07-07 Official page ↗
Aliases
CVE-2019-0982
Ecosystem
NuGet
Packages
Microsoft.AspNetCore.SignalR.Protocols.MessagePack
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Reviewed
2022-07-07

Affected packages

• NuGet Microsoft.AspNetCore.SignalR.Protocols.MessagePack: >= 1.1.0, < 1.1.5 → fixed in 1.1.5 • NuGet Microsoft.AspNetCore.SignalR.Protocols.MessagePack: >= 1.0.0, < 1.0.11 → fixed in 1.0.11

Description

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

Related

Alias · CVE (1)

  • CVE-2019-0982 A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service… vulnerability

References