A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.

An update of the dotnet package has been released.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka
    "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core
    2.1. (CVE-2018-8409)

The Microsoft ASP.NET Core installation on the remote host contains vulnerable packages. It is, therefore,affected by a Denial of Service vulnerability.

ID	Name	Product	Family	Severity
237067	Photon OS 4.0: Dotnet PHSA-2025-4.0-0804	Nessus	PhotonOS Local Security Checks	high
423202	SCA: security update for Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, System.IO.Pipelines (GHSA-j378-6mmw-hqfr)	Tenable Cloud Security	SCA Checks	high
423202	SCA: security update for Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, System.IO.Pipelines (GHSA-j378-6mmw-hqfr)	Tenable Self-Hosted Container Security	SCA Checks	high
117481	Security Updates for Microsoft .NET core and ASP.NET Core (DoS) (September 2018)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2018-8409

high

Tenable Plugins

high

high

high

high