CVE-2019-0820

EUVD-2021-1682
A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
microsoft.net_core
1.0
microsoft.net_core
1.1
microsoft.net_core
2.1
microsoft.net_core
2.2
microsoft.net_framework
2.0:sp2
microsoft.net_framework
3.0:sp2
microsoft.net_framework
3.5
microsoft.net_framework
3.5.1
microsoft.net_framework
4.5.2
microsoft.net_framework
4.6
microsoft.net_framework
4.6.2
microsoft.net_framework
4.6.2
microsoft.net_framework
4.7
microsoft.net_framework
4.7.1
microsoft.net_framework
4.7.2
microsoft.net_framework
4.6
microsoft.net_framework
4.6.1
microsoft.net_framework
4.6.2
microsoft.net_framework
4.7
microsoft.net_framework
4.7.1
microsoft.net_framework
4.7.2
microsoft.net_framework
4.7.1
microsoft.net_framework
4.7.2
microsoft.net_framework
4.7.2
microsoft.net_framework
4.7
microsoft.net_framework
4.7.1
microsoft.net_framework
4.7.2
microsoft.net_framework
4.8
redhatenterprise_linux
8.0
redhatenterprise_linux_eus
8.1
redhatenterprise_linux_eus
8.2
redhatenterprise_linux_eus
8.4
redhatenterprise_linux_eus
8.6
redhatenterprise_linux_server_aus
8.2
redhatenterprise_linux_server_aus
8.4
redhatenterprise_linux_server_aus
8.6
redhatenterprise_linux_server_tus
8.2
redhatenterprise_linux_server_tus
8.4
redhatenterprise_linux_server_tus
8.6
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB4499154
1607 (x64, x86)
KB4495610
1607 (x64, x86)
KB4494440
1703 (x64, x86)
KB4499181
1703 (x64, x86)
KB4495611
1709 (arm64, x64, x86)
KB4499179
1709 (x64, x86)
KB4495613
1803 (arm64, x64, x86)
KB4499167
1803 (x64, x86)
KB4495616
1809 (x64, x64, x86, x86)
KB4499405
1903 (x64, x86)
KB4495620
Windows 7
Service Pack 1 (x64, x64, x64, x64, x86, x86, x86, x86)
KB4499406
Windows 8.1
(x64, x64, x64, x64, x86, x86, x86, x86)
KB4499408
Windows RT 8.1
All
KB4499408
Windows Server
1803 Server Core
KB4499167
1803 Server Core
KB4495616
1903 Server Core
KB4495620
Windows Server 2008
Service Pack 2 (x64, x64, x64, x86, x86, x86)
KB4499409
Windows Server 2008 R2
Service Pack 1 (x64, x64, x64, x64)
KB4499406
Service Pack 1 Server Core (x64, x64, x64, x64)
KB4499406
Windows Server 2012
Server Core
KB4499407
Standard
KB4499407
Windows Server 2012 R2
Server Core
KB4499408
Standard
KB4499408
Windows Server 2016
Server Core
KB4494440
Server Core
KB4495610
Standard
KB4494440
Standard
KB4495610
Windows Server 2019
Server Core
KB4499405
Standard
KB4499405
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2019:1259
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820
https://access.redhat.com/errata/RHSA-2019:1259
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820