GHSA-3gp9-h8hw-pxpw

ghsaUSosv

Denial of service in .NET core

view advisory published 2022-05-24Licence: CC-BY-4.0

.NET Core and Visual Studio Denial of Service Vulnerability due to a vulnerability which exists when creating HTTPS web request during X509 certificate chain building.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-1721US	medium4.3	3.34% (89th)	—	2021-02-25
.NET Core and Visual Studio Denial of Service Vulnerability

references

External citations — patches, advisories, analysis.

https://github.com/dotnet/announcements/issues/175WEB
https://github.com/dotnet/runtime/issues/48067WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-1721ADVISORY
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1721WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan