GHSA-xcvr-qv8h-m7xw
Suggest an improvement- Source
- https://github.com/advisories/GHSA-xcvr-qv8h-m7xw
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-xcvr-qv8h-m7xw/GHSA-xcvr-qv8h-m7xw.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-xcvr-qv8h-m7xw
- Aliases
- Published
- 2022-05-13T01:07:06Z
- Modified
- 2024-11-28T05:41:54.526652Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- .NET Core Denial of Service Vulnerability
- Details
-
.NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability".
- Database specific
{ "nvd_published_at": "2018-03-14T17:29:00Z", "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-10-25T17:35:35Z" }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2018-0875
- https://github.com/dotnet/announcements/issues/62
- https://access.redhat.com/errata/RHSA-2018:0522
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0875
- http://www.securityfocus.com/bid/103225
- http://www.securitytracker.com/id/1040505
Affected packages
NuGet / Microsoft.NETCore.Jit
Package
- Name
- Microsoft.NETCore.Jit
- View open source insights on deps.dev
- Purl
- pkg:nuget/Microsoft.NETCore.Jit
NuGet / Microsoft.NETCore.Jit
Package
- Name
- Microsoft.NETCore.Jit
- View open source insights on deps.dev
- Purl
- pkg:nuget/Microsoft.NETCore.Jit
NuGet / Microsoft.NETCore.Jit
Package
- Name
- Microsoft.NETCore.Jit
- View open source insights on deps.dev
- Purl
- pkg:nuget/Microsoft.NETCore.Jit