GHSA-cmhx-cq75-c4mj

ghsaUSosv

Regular Expression Denial of Service in System.Text.RegularExpressions

view advisory published 2021-08-04Licence: CC-BY-4.0

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-0820US	high7.5	5.72% (93rd)	—	2019-05-16
A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. Thi…

references

External citations — patches, advisories, analysis.

https://access.redhat.com/errata/RHSA-2019:1259WEB
https://nvd.nist.gov/vuln/detail/CVE-2019-0820ADVISORY
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan