CVE-2020-1469

Source
https://nvd.nist.gov/vuln/detail/CVE-2020-1469
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1469.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-1469
Aliases
Published
2020-07-14T23:15:20Z
Modified
2024-09-03T03:14:55.829753Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A denial of service vulnerability exists when the .NET implementation of Bond improperly parses input, aka 'Bond Denial of Service Vulnerability'.

References

Affected packages

Git / github.com/microsoft/bond

Affected ranges

Type
GIT
Repo
https://github.com/microsoft/bond
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected

Affected versions

3.*

3.0.7

4.*

4.0.1
4.0.2
4.1.0
4.2.0
4.2.1
4.3.0

5.*

5.0.0
5.1.0
5.2.0
5.3.0
5.3.1

6.*

6.0.0
6.0.1

7.*

7.0.0
7.0.1
7.0.2

8.*

8.0.0
8.0.1
8.1.0
8.2.0

9.*

9.0.0
9.0.1

cs-comm-0.*

cs-comm-0.8.0

gbc@0.*

gbc@0.11.0.0
gbc@0.12.0.1
gbc@0.12.1.0

java-0.*

java-0.0.0-alpha-2017-08-24
java-0.0.0-alpha-2017-09-01
java-0.0.0-alpha-2017-10-26

java@7.*

java@7.0.0-preview-2017-11-16