EudorIACyber Intelligence
Operational monitoring Newsletter IT EN
← Back to intelligence
Vulnerability

CVE-2020-1161: A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web applicatio

Official source
EudorIA operational summary

What it means

Priority 70/100

NIST National Vulnerability Database ha pubblicato CVE-2020-1161. La rilevanza va confermata rispetto alle tecnologie effettivamente in uso.

Why it matters

Il segnale diventa operativo solo se prodotto, versione o servizio sono presenti nel perimetro.

AudienceITSOCCISO
Information centre

Translation in progress

NIST National Vulnerability Database

The official content is available in the original language. The Italian version will be published once automated checks are complete.

Text acquired from the source

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests.

Source
NIST National Vulnerability Database
Publishing entity
NIST National Vulnerability Database
Entity type
National authority
Area
North America · US
Original language
en · translation in preparation
Publication
22/05/2020 01:15
CVE
CVE-2020-1161
Classification
High
Stated country
US
Technical scope

Affected products and versions

Data available
ProductAffected release or rangeFix or verification requiredSource
microsoftasp.net core Versione 3.1 Verificare remediation e aggiornamenti nell'advisory del vendor NIST NVD
microsoftvisual studio 2017 da 15.1, inclusa; fino a 15.9, inclusa Verificare remediation e aggiornamenti nell'advisory del vendor NIST NVD
microsoftvisual studio 2019 da 16.0, inclusa; fino a 16.5, inclusa Verificare remediation e aggiornamenti nell'advisory del vendor NIST NVD
Sources for the versionsNIST National Vulnerability Database
Open the original source