{"id":"CVE-2018-8409","aliases":["GHSA-j378-6mmw-hqfr"],"url":"https://o3.security/vulnerability/CVE-2018-8409","summary":"Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests","details":"A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka \"System.IO.Pipelines Denial of Service.\" This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.","published":"2018-09-13T00:29:02.037Z","modified":"2026-07-08T05:55:26.463251985Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"NuGet","name":"Microsoft.AspNetCore.All","fixedVersion":"2.1.4"},{"ecosystem":"NuGet","name":"Microsoft.AspNetCore.App","fixedVersion":"2.1.4"},{"ecosystem":"NuGet","name":"System.IO.Pipelines","fixedVersion":"4.5.1"}],"fix":null,"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/105223"},{"type":"FIX","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8409"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T05:55:26.463251985Z"}}