VDB
Sign up
MEDIUM

GHSA-23cv-jh4v-vffm

Denial of service in ASP.NET Core

Quick fix

GHSA-23cv-jh4v-vffm — Microsoft.AspNetCore.All: upgrade to the fixed version with the command below.

dotnet add package Microsoft.AspNetCore.All --version 2.1.15

Details

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

Are you affected?

Enter the version of the package you're using.

Affected packages

NuGet/Microsoft.AspNetCore.All
Introduced in: 2.1.0Fixed in: 2.1.15
Fixdotnet add package Microsoft.AspNetCore.All --version 2.1.15
NuGet/Microsoft.AspNetCore.App
Introduced in: 3.1.0Fixed in: 3.1.1
Fixdotnet add package Microsoft.AspNetCore.App --version 3.1.1
NuGet/Microsoft.AspNetCore.App
Introduced in: 3.0.0Fixed in: 3.0.1
Fixdotnet add package Microsoft.AspNetCore.App --version 3.0.1
NuGet/Microsoft.AspNetCore.App
Introduced in: 2.1.0Fixed in: 2.1.15
Fixdotnet add package Microsoft.AspNetCore.App --version 2.1.15
NuGet/Microsoft.AspNetCore.Http.Connections
Introduced in: 1.0.0Fixed in: 1.0.15
Fixdotnet add package Microsoft.AspNetCore.Http.Connections --version 1.0.15
NuGet/Microsoft.AspNetCore.App.Runtime.linux-arm
Introduced in: 3.1.0Fixed in: 3.1.1
Fixdotnet add package Microsoft.AspNetCore.App.Runtime.linux-arm --version 3.1.1
NuGet/Microsoft.AspNetCore.App.Runtime.linux-arm64
Introduced in: 3.1.0Fixed in: 3.1.1
Fixdotnet add package Microsoft.AspNetCore.App.Runtime.linux-arm64 --version 3.1.1
NuGet/Microsoft.AspNetCore.App.Runtime.linux-musl-x64
Introduced in: 3.1.0Fixed in: 3.1.1
Fixdotnet add package Microsoft.AspNetCore.App.Runtime.linux-musl-x64 --version 3.1.1
NuGet/Microsoft.AspNetCore.App.Runtime.linux-x64
Introduced in: 3.1.0Fixed in: 3.1.1
Fixdotnet add package Microsoft.AspNetCore.App.Runtime.linux-x64 --version 3.1.1
NuGet/Microsoft.AspNetCore.App.Runtime.osx-x64
Introduced in: 3.1.0Fixed in: 3.1.1
Fixdotnet add package Microsoft.AspNetCore.App.Runtime.osx-x64 --version 3.1.1
NuGet/Microsoft.AspNetCore.App.Runtime.win-arm
Introduced in: 3.1.0Fixed in: 3.1.1
Fixdotnet add package Microsoft.AspNetCore.App.Runtime.win-arm --version 3.1.1
NuGet/Microsoft.AspNetCore.App.Runtime.win-x64
Introduced in: 3.1.0Fixed in: 3.1.1
Fixdotnet add package Microsoft.AspNetCore.App.Runtime.win-x64 --version 3.1.1
NuGet/Microsoft.AspNetCore.App.Runtime.win-x86
Introduced in: 3.1.0Fixed in: 3.1.1
Fixdotnet add package Microsoft.AspNetCore.App.Runtime.win-x86 --version 3.1.1

References