Description
A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | System.IO.Pipelines | System.IO.Pipelines | — |
| Microsoft | .NET Core | 2.1 | — |
| Microsoft | ASP.NET Core | 2.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Microsoft.AspNetCore.All | >= 2.1.0, < 2.1.4 | 2.1.4 | GHSA-j378-6mmw-hqfr |
| NuGet | Microsoft.AspNetCore.App | >= 2.1.0, < 2.1.4 | 2.1.4 | GHSA-j378-6mmw-hqfr |
| NuGet | System.IO.Pipelines | >= 4.5.0, < 4.5.1 | 4.5.1 | GHSA-j378-6mmw-hqfr |