{"id":"GHSA-cgpw-2gph-2r9g","aliases":[],"url":"https://o3.security/vulnerability/GHSA-cgpw-2gph-2r9g","summary":"Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core","details":"Microsoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated. An attacker who successfully exploited this vulnerability could cause a denial of service attack.\n\nThe update addresses the vulnerability by correcting how ASP.NET Core handles such requests.\n","published":"2018-10-16T19:59:59Z","modified":"2024-12-02T05:46:46.432090Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"NuGet","name":"Microsoft.AspNetCore.Server.Kestrel.Core","fixedVersion":"2.0.4"},{"ecosystem":"NuGet","name":"Microsoft.AspNetCore.All","fixedVersion":"2.0.9"},{"ecosystem":"NuGet","name":"Microsoft.AspNetCore.App","fixedVersion":"2.1.2"},{"ecosystem":"NuGet","name":"Microsoft.AspNetCore.Server.Kestrel.Core","fixedVersion":"2.1.2"},{"ecosystem":"NuGet","name":"Microsoft.AspNetCore.All","fixedVersion":"2.1.2"}],"fix":null,"references":[{"type":"WEB","url":"https://github.com/aspnet/Announcements/issues/311"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-cgpw-2gph-2r9g"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-12-02T05:46:46.432090Z"}}