High MSRC-CVE-2022-26924 1 CVE

YARP Denial of Service Vulnerability

Published Apr 12, 2022 · Updated Apr 12, 2022

Vendor: Microsoft

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Where can I find more information about YARP?
To learn more about YARP, see YARP: Yet Another Reverse Proxy.

Security updates
1.0.1 — https://github.com/microsoft/reverse-proxy/security/advisories/GHSA-8xc6-g8xw-h2c4

Vulnerabilities 1

High 7.5

CVE-2022-26924

YARP Denial of Service Vulnerability

YARP Denial of Service Vulnerability

Microsoft YARP 1.0 YARP 1.1RC Yarp.ReverseProxy NuGet

Apr 15, 2022

Revision history

2022-04-12 #1
Information published.

References

CVE-2022-26924 YARP Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26924
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss