GitHub Advisoryadvisory · NuGet

GHSA-mv2r-q4g5-j8q5 Denial of service in ASP.NET Core

HIGH Published 2018-10-16 Modified 2022-07-07 Official page ↗
Aliases
CVE-2018-8269
Ecosystem
NuGet
Packages
Microsoft.Data.OData, Microsoft.AspNetCore.DataProtection.AzureStorage, Microsoft.AspNetCore.All
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Reviewed
2020-06-16

Affected packages

• NuGet Microsoft.Data.OData: < 5.8.4 → fixed in 5.8.4 • NuGet Microsoft.AspNetCore.DataProtection.AzureStorage: >= 2.1.0, < 2.1.13 → fixed in 2.1.13 • NuGet Microsoft.AspNetCore.DataProtection.AzureStorage: >= 2.2.0, < 2.2.7 → fixed in 2.2.7 • NuGet Microsoft.AspNetCore.All: >= 2.1.0, < 2.1.13 → fixed in 2.1.13 • NuGet Microsoft.AspNetCore.All: >= 2.2.0, < 2.2.7 → fixed in 2.2.7

Description

A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.

Related

Alias · CVE (1)

  • CVE-2018-8269 A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability."… vulnerability

References