CVE-2020-1161
mediumPriorität · verfolgen · 32EPSS 0.053 · 93. PerzentilEURUUSEPSS · bewertet 2026-10-23
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–7.5
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (23)
Betroffene Produkte und Versionsbereiche.
- NuGet Microsoft.AspNetCore.App.Runtime.linux-arm3.1.0 → 3.1.4osvUSpkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm
- NuGet Microsoft.AspNetCore.App.Runtime.linux-arm643.1.0 → 3.1.4osvUSpkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64
- NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-arm643.1.0 → 3.1.4osvUSpkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
- NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-x643.1.0 → 3.1.4osvUSpkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64
- NuGet Microsoft.AspNetCore.App.Runtime.linux-x643.1.0 → 3.1.4osvUSpkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-x64
- NuGet Microsoft.AspNetCore.App.Runtime.osx-x643.1.0 → 3.1.4osvUSpkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-x64
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- GHSA-3cf7-7wq6-8842ASP.NET Core Denial of Service Vulnerability2022-05-24ghsa · osvUS
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
- BIT-aspnet-core-2020-1161ASP.NET Core Denial of Service Vulnerability2024-03-06vendor · osvUS
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests.
auch bekannt als (6)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (11)
Externe Belege — Patches, Meldungen, Analysen.
- http://www.nsfocus.net/vulndb/46715cnnvd
- https://access.redhat.com/security/cve/cve-2020-1161cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-1161cnnvd
- https://packetstormsecurity.com/files/157794/Red-Hat-Security-Advisory-2020-2250-01.htmlcnnvd
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1161cnnvd
- https://portal.msrc.microsoft.com/zh-CN/security-guidance/advisory/CVE-2020-1161cnnvd
- https://vigilance.fr/vulnerability/Microsoft-Visual-Studio-vulnerabilities-of-May-2020-32249cnnvd
- https://www.auscert.org.au/bulletins/ESB-2020.1814/cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan