Skip to content
OpenAdvisories
High · 7.5 CVE-2019-1301 EUVD-2019-0655GHSA-62gw-3rmj-wmp2

High severity vulnerability that affects System.Management.Automation

Published Sep 11, 2019 · Updated Aug 4, 2024 · Assigned by microsoft

Vendor: Microsoft Product: .NET Core Package: System.Management.Automation Ecosystem: NuGet

Description

A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'.

Affected products

VendorProductAffectedFixed
Microsoft .NET Core 2.1, 2.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 8 dotnet +2 2.1.509-1.el8_0 RHSA-2019:2731
RHEL 8 dotnet-host +2 2.1.13-1.el8_0 RHSA-2019:2731
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Dotnet 2 rh-dotnet21 +1 2.1-12.el7 RHSA-2019:2732
Red Hat Rhel Dotnet 2 rh-dotnet21-dotnet +2 2.1.509-1.el7 RHSA-2019:2732
Red Hat Rhel Dotnet 2 rh-dotnet21-dotnet-host +1 2.1.13-1.el7 RHSA-2019:2732
Red Hat Rhel Dotnet 2 rh-dotnet22 +1 2.2-9.el7 RHSA-2019:2732
Red Hat Rhel Dotnet 2 rh-dotnet22-dotnet +2 2.2.109-1.el7 RHSA-2019:2732
Red Hat Rhel Dotnet 2 rh-dotnet22-dotnet-host +2 2.2.7-1.el7 RHSA-2019:2732

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 dotnet +2 2.1.509-1.el8_0 ELSA-2019-2731
Oracle Linux 8 dotnet-host +2 2.1.13-1.el8_0 ELSA-2019-2731

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet System.Management.Automation >= 6.2.0, < 6.2.3 6.2.3 GHSA-62gw-3rmj-wmp2
NuGet System.Management.Automation >= 6.0.0, < 6.1.6 6.1.6 GHSA-62gw-3rmj-wmp2

Advisories 3

References