GHSA-j378-6mmw-hqfr

ghsaUSosv

Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests

view advisory published 2018-10-16Licence: CC-BY-4.0

A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-8409US	high7.5	6.56% (94th)	—	2018-09-13
A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pi…

references

External citations — patches, advisories, analysis.

http://www.securityfocus.com/bid/105223WEB
https://github.com/advisories/GHSA-j378-6mmw-hqfrADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2018-8409ADVISORY
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8409WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan