A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET
    Core Denial of Service Vulnerability'. (CVE-2019-0982)

The Microsoft .NET Core SDK installation on the remote host is version 1.x < 1.1.14, 2.1.x < 2.1.507 or 2.1.604, 2.2.x < 2.2.107 or 2.2.204.
It is, therefore, affected by a denial of service (DoS) vulnerability when .NET Core improperly handles web requests. An unauthenticated, remote attacker could exploit this issue, via sending a specially crafted requests to the .NET Core application, to cause the application to stop responding.

The Microsoft .NET Core installation on the remote host is version 1.0.x < 1.0.16, 1.1.x < 1.1.13, 2.1.x < 2.1.11, 2.2.x < 2.2.5.
It is, therefore, affected by a denial of service (DoS) vulnerability when .NET Core improperly handles web requests. An unauthenticated, remote attacker could exploit this issue, via sending a specially crafted requests to the .NET Core application, to cause the application to stop responding.

The Microsoft ASP.NET Core installation on the remote host is version 2.1.x < 2.1.11, 2.2.x < 2.2.5. It is, therefore, affected by a denial of service (DoS) vulnerability when ASP.NET Core improperly handles web requests. An unauthenticated, remote attacker could exploit this issue, via sending a specially crafted requests to the .NET Core application, to cause the application to stop responding.

ID	Name	Product	Family	Type	Severity
410267	SCA: security update for Microsoft.AspNetCore.SignalR.Protocols.MessagePack (GHSA-4jxx-4qxw-prxm)	Tenable Cloud Security	SCA Checks	Local	high
410267	SCA: security update for Microsoft.AspNetCore.SignalR.Protocols.MessagePack (GHSA-4jxx-4qxw-prxm)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
125225	Security Update for .NET Core SDK (May 2019)	Nessus	Windows	Local	high
125217	Security Update for .NET Core (May 2019)	Nessus	Windows	Local	high
125164	Security Update for Microsoft ASP.NET Core (DoS) (May 2019)	Nessus	Windows	Local	high

Detections

Analytics

CVE-2019-0982

high

Tenable Plugins

high

high

high

high

high