CVE-2020-1108

21.05.2020, 23:15

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application.
The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 93.06%

Affected Products (NVD)

Vendor	Product	Version
microsoft	.net	5.0:preview1
microsoft	.net	5.0:preview2
microsoft	.net	5.0:preview3
microsoft	.net_core	2.1 ≤ 𝑥 ≤ 2.1.18
microsoft	.net_core	3.0 ≤ 𝑥 ≤ 3.1.4
microsoft	.net_framework	2.0:sp2
microsoft	.net_framework	3.0:sp2
microsoft	.net_framework	4.6
microsoft	.net_framework	3.5
microsoft	.net_framework	3.5
microsoft	.net_framework	4.5.2
microsoft	.net_framework	4.6
microsoft	.net_framework	4.6.1
microsoft	.net_framework	4.6.2
microsoft	.net_framework	4.7
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.8
microsoft	.net_framework	3.5
microsoft	.net_framework	4.6.2
microsoft	.net_framework	4.7
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.8
microsoft	.net_framework	3.5
microsoft	.net_framework	4.6.2
microsoft	.net_framework	4.7
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.8
microsoft	.net_framework	3.5
microsoft	.net_framework	4.6
microsoft	.net_framework	4.6.1
microsoft	.net_framework	4.6.2
microsoft	.net_framework	3.5
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.8
microsoft	.net_framework	3.5
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	3.5
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.8
microsoft	.net_framework	3.5
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.8
microsoft	.net_framework	3.5
microsoft	.net_framework	4.8
microsoft	.net_framework	3.5
microsoft	.net_framework	4.8
microsoft	.net_framework	3.5
microsoft	.net_framework	4.8
microsoft	.net_framework	3.5.1
microsoft	.net_framework	4.6
microsoft	.net_framework	4.6.1
microsoft	.net_framework	4.6.2
microsoft	.net_framework	4.7
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.8
microsoft	.net_framework	4.5.2
microsoft	.net_framework	4.6
microsoft	.net_framework	4.6.1
microsoft	.net_framework	4.6.2
microsoft	.net_framework	4.7
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.5.2
microsoft	.net_framework	4.6
microsoft	.net_framework	4.6.1
microsoft	.net_framework	4.6.2
microsoft	.net_framework	4.7
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.8
microsoft	.net_framework	4.5.2
microsoft	.net_framework	4.5.2
microsoft	.net_framework	3.5
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.5.2
microsoft	.net_framework	4.5.2
microsoft	.net_framework	4.6
microsoft	.net_framework	4.6.1
microsoft	.net_framework	4.6.2
microsoft	.net_framework	4.7
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.8
microsoft	.net_core	2.1
microsoft	.net_core	3.1
microsoft	visual_studio_2017	15.9
microsoft	visual_studio_2019	16.0
microsoft	visual_studio_2019	16.4
microsoft	visual_studio_2019	16.5
microsoft	powershell	7.0
microsoft	powershell_core	6.2

𝑥

= Vulnerable software versions

Windows Releases

Platform

Version

Windows 10

(x64, x86)	KB4556826
1607 (x64, x86)	KB4552926
1607 (x64, x86)	KB4556813
1709 (arm64, x64, x86)	KB4556812
1709 (x64, x86)	KB4552928
1803 (arm64, x64, x86)	KB4556807
1803 (x64, x86)	KB4552929
1809 (arm64, x64, x64, x86, x86)	KB4556441
1903 (arm64, x64, x86)	KB4552931
1909 (arm64, x64, x86)	KB4552931

Windows 7

Service Pack 1 (x64, x86)	KB4556399
Service Pack 1 (x64, x64, x64, x64, x86, x86, x86, x86)	KB4556403

Windows 8.1

(x64, x64, x64, x64, x86, x86, x86, x86)

KB4556405

Windows RT 8.1

All

KB4556401

Windows Server

1803 Server Core	KB4552929
1803 Server Core	KB4556807
1903 Server Core	KB4552931
1909 Server Core	KB4552931

Windows Server 2008

Service Pack 2 (x64, x64, x64, x86, x86, x86)

KB4556406

Windows Server 2008 R2

Service Pack 1 (x64)	KB4556399
Service Pack 1 (x64, x64, x64, x64)	KB4556403
Service Pack 1 Server Core (x64)	KB4556399
Service Pack 1 Server Core (x64, x64, x64)	KB4556403

Windows Server 2012

Server Core	KB4556404
Standard	KB4556404

Windows Server 2012 R2

Server Core	KB4556405
Standard	KB4556405

Windows Server 2016

Server Core	KB4552926
Server Core	KB4556813
Standard	KB4552926
Standard	KB4556813

Windows Server 2019

Server Core	KB4556441
Standard	KB4556441

Red Hat Enterprise Linux Releases

Red Hat Product

Release

aspnetcore-runtime-3.1

RHEL 8	0:3.1.5-2.el8_2 fixed
RHEL 8.2 AUS	0:3.1.5-2.el8_2 fixed
RHEL 8.2 E4S	0:3.1.5-2.el8_2 fixed
RHEL 8.2 EUS	0:3.1.5-2.el8_2 fixed
RHEL 8.2 TUS	0:3.1.5-2.el8_2 fixed

aspnetcore-targeting-pack-3.1

RHEL 8	0:3.1.5-2.el8_2 fixed
RHEL 8.2 AUS	0:3.1.5-2.el8_2 fixed
RHEL 8.2 E4S	0:3.1.5-2.el8_2 fixed
RHEL 8.2 EUS	0:3.1.5-2.el8_2 fixed
RHEL 8.2 TUS	0:3.1.5-2.el8_2 fixed

dotnet

RHEL 8	0:3.1.105-2.el8_2 fixed
RHEL 8.2 AUS	0:3.1.105-2.el8_2 fixed
RHEL 8.2 E4S	0:3.1.105-2.el8_2 fixed
RHEL 8.2 EUS	0:3.1.105-2.el8_2 fixed
RHEL 8.2 TUS	0:3.1.105-2.el8_2 fixed

dotnet-apphost-pack-3.1

RHEL 8	0:3.1.5-2.el8_2 fixed
RHEL 8.2 AUS	0:3.1.5-2.el8_2 fixed
RHEL 8.2 E4S	0:3.1.5-2.el8_2 fixed
RHEL 8.2 EUS	0:3.1.5-2.el8_2 fixed
RHEL 8.2 TUS	0:3.1.5-2.el8_2 fixed

dotnet-host

RHEL 8	0:3.1.5-2.el8_2 fixed
RHEL 8.2 AUS	0:3.1.5-2.el8_2 fixed
RHEL 8.2 E4S	0:3.1.5-2.el8_2 fixed
RHEL 8.2 EUS	0:3.1.5-2.el8_2 fixed
RHEL 8.2 TUS	0:3.1.5-2.el8_2 fixed

dotnet-host-fxr-2.1

RHEL 8	0:2.1.19-1.el8_2 fixed
RHEL 8.2 AUS	0:2.1.19-1.el8_2 fixed
RHEL 8.2 E4S	0:2.1.19-1.el8_2 fixed
RHEL 8.2 EUS	0:2.1.19-1.el8_2 fixed
RHEL 8.2 TUS	0:2.1.19-1.el8_2 fixed

dotnet-hostfxr-3.1

RHEL 8	0:3.1.5-2.el8_2 fixed
RHEL 8.2 AUS	0:3.1.5-2.el8_2 fixed
RHEL 8.2 E4S	0:3.1.5-2.el8_2 fixed
RHEL 8.2 EUS	0:3.1.5-2.el8_2 fixed
RHEL 8.2 TUS	0:3.1.5-2.el8_2 fixed

dotnet-runtime-2.1

RHEL 8	0:2.1.19-1.el8_2 fixed
RHEL 8.2 AUS	0:2.1.19-1.el8_2 fixed
RHEL 8.2 E4S	0:2.1.19-1.el8_2 fixed
RHEL 8.2 EUS	0:2.1.19-1.el8_2 fixed
RHEL 8.2 TUS	0:2.1.19-1.el8_2 fixed

dotnet-runtime-3.1

RHEL 8	0:3.1.5-2.el8_2 fixed
RHEL 8.2 AUS	0:3.1.5-2.el8_2 fixed
RHEL 8.2 E4S	0:3.1.5-2.el8_2 fixed
RHEL 8.2 EUS	0:3.1.5-2.el8_2 fixed
RHEL 8.2 TUS	0:3.1.5-2.el8_2 fixed

dotnet-sdk-2.1

RHEL 8	0:2.1.515-1.el8_2 fixed
RHEL 8.2 AUS	0:2.1.515-1.el8_2 fixed
RHEL 8.2 E4S	0:2.1.515-1.el8_2 fixed
RHEL 8.2 EUS	0:2.1.515-1.el8_2 fixed
RHEL 8.2 TUS	0:2.1.515-1.el8_2 fixed

dotnet-sdk-2.1.5xx

RHEL 8	0:2.1.515-1.el8_2 fixed
RHEL 8.2 AUS	0:2.1.515-1.el8_2 fixed
RHEL 8.2 E4S	0:2.1.515-1.el8_2 fixed
RHEL 8.2 EUS	0:2.1.515-1.el8_2 fixed
RHEL 8.2 TUS	0:2.1.515-1.el8_2 fixed

dotnet-sdk-3.1

RHEL 8	0:3.1.105-2.el8_2 fixed
RHEL 8.2 AUS	0:3.1.105-2.el8_2 fixed
RHEL 8.2 E4S	0:3.1.105-2.el8_2 fixed
RHEL 8.2 EUS	0:3.1.105-2.el8_2 fixed
RHEL 8.2 TUS	0:3.1.105-2.el8_2 fixed

dotnet-targeting-pack-3.1

RHEL 8	0:3.1.5-2.el8_2 fixed
RHEL 8.2 AUS	0:3.1.5-2.el8_2 fixed
RHEL 8.2 E4S	0:3.1.5-2.el8_2 fixed
RHEL 8.2 EUS	0:3.1.5-2.el8_2 fixed
RHEL 8.2 TUS	0:3.1.5-2.el8_2 fixed

dotnet-templates-3.1

RHEL 8	0:3.1.105-2.el8_2 fixed
RHEL 8.2 AUS	0:3.1.105-2.el8_2 fixed
RHEL 8.2 E4S	0:3.1.105-2.el8_2 fixed
RHEL 8.2 EUS	0:3.1.105-2.el8_2 fixed
RHEL 8.2 TUS	0:3.1.105-2.el8_2 fixed

netstandard-targeting-pack-2.1

RHEL 8	0:3.1.105-2.el8_2 fixed
RHEL 8.2 AUS	0:3.1.105-2.el8_2 fixed
RHEL 8.2 E4S	0:3.1.105-2.el8_2 fixed
RHEL 8.2 EUS	0:3.1.105-2.el8_2 fixed
RHEL 8.2 TUS	0:3.1.105-2.el8_2 fixed

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1108

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1108