CVE-2020-0602

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
microsoftCNA
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
microsoftasp.net_core
2.1
microsoftasp.net_core
3.0
microsoftasp.net_core
3.1
redhatenterprise_linux
8.0
redhatenterprise_linux_eus
8.1
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
microsoftasp.net
2.1
CNA
microsoftasp.net
3.0
CNA
microsoftasp.net
3.1
CNA
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
aspnetcore-runtime-3.0
RHEL 8
0:3.0.2-2.el8_1
fixed
RHEL 8.1 E4S
0:3.0.2-2.el8_1
fixed
RHEL 8.1 EUS
0:3.0.2-2.el8_1
fixed
aspnetcore-targeting-pack-3.0
RHEL 8
0:3.0.2-2.el8_1
fixed
RHEL 8.1 E4S
0:3.0.2-2.el8_1
fixed
RHEL 8.1 EUS
0:3.0.2-2.el8_1
fixed
dotnet
RHEL 8
0:3.0.102-2.el8_1
fixed
RHEL 8.1 E4S
0:3.0.102-2.el8_1
fixed
RHEL 8.1 EUS
0:3.0.102-2.el8_1
fixed
dotnet-apphost-pack-3.0
RHEL 8
0:3.0.2-2.el8_1
fixed
RHEL 8.1 E4S
0:3.0.2-2.el8_1
fixed
RHEL 8.1 EUS
0:3.0.2-2.el8_1
fixed
dotnet-host
RHEL 8
0:3.0.2-2.el8_1
fixed
RHEL 8.1 E4S
0:3.0.2-2.el8_1
fixed
RHEL 8.1 EUS
0:3.0.2-2.el8_1
fixed
dotnet-hostfxr-3.0
RHEL 8
0:3.0.2-2.el8_1
fixed
RHEL 8.1 E4S
0:3.0.2-2.el8_1
fixed
RHEL 8.1 EUS
0:3.0.2-2.el8_1
fixed
dotnet-runtime-3.0
RHEL 8
0:3.0.2-2.el8_1
fixed
RHEL 8.1 E4S
0:3.0.2-2.el8_1
fixed
RHEL 8.1 EUS
0:3.0.2-2.el8_1
fixed
dotnet-sdk-3.0
RHEL 8
0:3.0.102-2.el8_1
fixed
RHEL 8.1 E4S
0:3.0.102-2.el8_1
fixed
RHEL 8.1 EUS
0:3.0.102-2.el8_1
fixed
dotnet-targeting-pack-3.0
RHEL 8
0:3.0.2-2.el8_1
fixed
RHEL 8.1 E4S
0:3.0.2-2.el8_1
fixed
RHEL 8.1 EUS
0:3.0.2-2.el8_1
fixed
dotnet-templates-3.0
RHEL 8
0:3.0.102-2.el8_1
fixed
RHEL 8.1 E4S
0:3.0.102-2.el8_1
fixed
RHEL 8.1 EUS
0:3.0.102-2.el8_1
fixed
netstandard-targeting-pack-2.1
RHEL 8
0:3.0.102-2.el8_1
fixed
RHEL 8.1 E4S
0:3.0.102-2.el8_1
fixed
RHEL 8.1 EUS
0:3.0.102-2.el8_1
fixed