GitHub Advisoryadvisory · NuGet

GHSA-cmhx-cq75-c4mj Regular Expression Denial of Service in System.Text.RegularExpressions

HIGH Published 2021-08-04 Modified 2023-02-21 Official page ↗
Aliases
CVE-2019-0820
Ecosystem
NuGet
Packages
System.Text.RegularExpressions
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-1333, CWE-400
Reviewed
2021-08-04

Affected packages

• NuGet System.Text.RegularExpressions: >= 4.3.0, < 4.3.1 → fixed in 4.3.1

Description

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.

Related

Alias · CVE (1)

  • CVE-2019-0820 A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET… vulnerability

Weakness · CWE (2)

  • CWE-1333 Inefficient Regular Expression Complexity weakness
  • CWE-400 Uncontrolled Resource Consumption weakness

References