CVE-2019-0564
First published: Tue Dec 18 2018(Updated: )
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft ASP.NET Core | =2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/106413
- https://access.redhat.com/errata/RHSA-2019:0040
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0564
- https://github.com/aspnet/Announcements/issues/334
- https://github.com/aspnet/AspNetCore/issues/6487
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0564
- https://bugzilla.redhat.com/show_bug.cgi?id=1660634
Frequently Asked Questions
What is CVE-2019-0564?
CVE-2019-0564 is a denial of service vulnerability in ASP.NET Core that allows attackers to cause a service outage by sending specially crafted web requests.
What is the severity of CVE-2019-0564?
CVE-2019-0564 has a severity rating of high, with a CVSS score of 7.5.
Which version of ASP.NET Core is affected by CVE-2019-0564?
ASP.NET Core version 2.1 is affected by CVE-2019-0564.
How can an attacker exploit CVE-2019-0564?
An attacker can exploit CVE-2019-0564 by sending specially crafted web requests to a vulnerable ASP.NET Core application, causing a denial of service.
Are there any known fixes for CVE-2019-0564?
Yes, Microsoft has released a security update to address this vulnerability. It is recommended to apply the latest updates for ASP.NET Core.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-0564
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft asp.net core
- version/microsoft asp.net core/2.1