CVE-2020-1161 | SynScan

Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2020-1161

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

Published: May 22, 2020
Updated: May 9, 2024
CVE: CVE-2020-1161
GHSA: GHSA-3cf7-7wq6-8842
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
microsoft / asp.net_core	3.1	3.1.x
microsoft / visual_studio_2017	15.1	15.9.x
microsoft / visual_studio_2019	16.0	16.5.x
Microsoft.AspNetCore.App.Runtime.linux-arm	3.1.0	3.1.4
Microsoft.AspNetCore.App.Runtime.linux-arm64	3.1.0	3.1.4
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64	3.1.0	3.1.4
Microsoft.AspNetCore.App.Runtime.linux-musl-x64	3.1.0	3.1.4
Microsoft.AspNetCore.App.Runtime.linux-x64	3.1.0	3.1.4
Microsoft.AspNetCore.App.Runtime.osx-x64	3.1.0	3.1.4
Microsoft.AspNetCore.App.Runtime.win-arm	3.1.0	3.1.4
Microsoft.AspNetCore.App.Runtime.win-x64	3.1.0	3.1.4
Microsoft.AspNetCore.App.Runtime.win-x86	3.1.0	3.1.4