CVE-2020-1161

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
microsoftasp.net_core
3.1
microsoftvisual_studio_2017
15.1 ≤
𝑥
≤ 15.9
microsoftvisual_studio_2019
16.0 ≤
𝑥
≤ 16.5
𝑥
= Vulnerable software versions
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
aspnetcore-runtime-3.1
RHEL 8
0:3.1.4-2.el8_2
fixed
RHEL 8.2 AUS
0:3.1.4-2.el8_2
fixed
RHEL 8.2 E4S
0:3.1.4-2.el8_2
fixed
RHEL 8.2 EUS
0:3.1.4-2.el8_2
fixed
RHEL 8.2 TUS
0:3.1.4-2.el8_2
fixed
aspnetcore-targeting-pack-3.1
RHEL 8
0:3.1.4-2.el8_2
fixed
RHEL 8.2 AUS
0:3.1.4-2.el8_2
fixed
RHEL 8.2 E4S
0:3.1.4-2.el8_2
fixed
RHEL 8.2 EUS
0:3.1.4-2.el8_2
fixed
RHEL 8.2 TUS
0:3.1.4-2.el8_2
fixed
dotnet
RHEL 8
0:3.1.104-2.el8_2
fixed
RHEL 8.2 AUS
0:3.1.104-2.el8_2
fixed
RHEL 8.2 E4S
0:3.1.104-2.el8_2
fixed
RHEL 8.2 EUS
0:3.1.104-2.el8_2
fixed
RHEL 8.2 TUS
0:3.1.104-2.el8_2
fixed
dotnet-apphost-pack-3.1
RHEL 8
0:3.1.4-2.el8_2
fixed
RHEL 8.2 AUS
0:3.1.4-2.el8_2
fixed
RHEL 8.2 E4S
0:3.1.4-2.el8_2
fixed
RHEL 8.2 EUS
0:3.1.4-2.el8_2
fixed
RHEL 8.2 TUS
0:3.1.4-2.el8_2
fixed
dotnet-host
RHEL 8
0:3.1.4-2.el8_2
fixed
RHEL 8.2 AUS
0:3.1.4-2.el8_2
fixed
RHEL 8.2 E4S
0:3.1.4-2.el8_2
fixed
RHEL 8.2 EUS
0:3.1.4-2.el8_2
fixed
RHEL 8.2 TUS
0:3.1.4-2.el8_2
fixed
dotnet-hostfxr-3.1
RHEL 8
0:3.1.4-2.el8_2
fixed
RHEL 8.2 AUS
0:3.1.4-2.el8_2
fixed
RHEL 8.2 E4S
0:3.1.4-2.el8_2
fixed
RHEL 8.2 EUS
0:3.1.4-2.el8_2
fixed
RHEL 8.2 TUS
0:3.1.4-2.el8_2
fixed
dotnet-runtime-3.1
RHEL 8
0:3.1.4-2.el8_2
fixed
RHEL 8.2 AUS
0:3.1.4-2.el8_2
fixed
RHEL 8.2 E4S
0:3.1.4-2.el8_2
fixed
RHEL 8.2 EUS
0:3.1.4-2.el8_2
fixed
RHEL 8.2 TUS
0:3.1.4-2.el8_2
fixed
dotnet-sdk-3.1
RHEL 8
0:3.1.104-2.el8_2
fixed
RHEL 8.2 AUS
0:3.1.104-2.el8_2
fixed
RHEL 8.2 E4S
0:3.1.104-2.el8_2
fixed
RHEL 8.2 EUS
0:3.1.104-2.el8_2
fixed
RHEL 8.2 TUS
0:3.1.104-2.el8_2
fixed
dotnet-targeting-pack-3.1
RHEL 8
0:3.1.4-2.el8_2
fixed
RHEL 8.2 AUS
0:3.1.4-2.el8_2
fixed
RHEL 8.2 E4S
0:3.1.4-2.el8_2
fixed
RHEL 8.2 EUS
0:3.1.4-2.el8_2
fixed
RHEL 8.2 TUS
0:3.1.4-2.el8_2
fixed
dotnet-templates-3.1
RHEL 8
0:3.1.104-2.el8_2
fixed
RHEL 8.2 AUS
0:3.1.104-2.el8_2
fixed
RHEL 8.2 E4S
0:3.1.104-2.el8_2
fixed
RHEL 8.2 EUS
0:3.1.104-2.el8_2
fixed
RHEL 8.2 TUS
0:3.1.104-2.el8_2
fixed
netstandard-targeting-pack-2.1
RHEL 8
0:3.1.104-2.el8_2
fixed
RHEL 8.2 AUS
0:3.1.104-2.el8_2
fixed
RHEL 8.2 E4S
0:3.1.104-2.el8_2
fixed
RHEL 8.2 EUS
0:3.1.104-2.el8_2
fixed
RHEL 8.2 TUS
0:3.1.104-2.el8_2
fixed