Microsoft.AspNetCore.Server.Kestrel.Core

2 results · Clear filters · Feed

• Medium —
  GHSA-cgpw-2gph-2r9g

  Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core

  Microsoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated. An attacker who successfully exploited this vulnerability could cause a denial of service attack. The update addresses the vulnerability by correct…

  Microsoft.AspNetCore.All Microsoft.AspNetCore.App Microsoft.AspNetCore.Server.Kestrel.Core NuGet
  Oct 16, 2018
• Medium —
  GHSA-3m2r-q8x3-xmf7

  Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.Server.Kestrel.Core, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions, and Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv

  Microsoft made an internal discovery of a security vulnerability in version 2.x of ASP.NET Core where a specially crafted request can cause excess resource consumption in Kestrel.

  Microsoft.AspNetCore.All Microsoft.AspNetCore.Server.Kestrel.Core Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions NuGet
  Oct 16, 2018