CVE-2020-0602
First published: Thu Jan 09 2020(Updated: )
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/aspnet core | <3.0.1 | 3.0.1 |
| redhat/aspnet core | <3.1.1 | 3.1.1 |
| Microsoft ASP.NET Core | =2.1 | |
| Microsoft ASP.NET Core | =3.0 | |
| Microsoft ASP.NET Core | =3.1 | |
| Redhat Enterprise Linux | =8.0 | |
| Redhat Enterprise Linux Eus | =8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0602
- https://github.com/aspnet/Announcements/issues/402
- https://access.redhat.com/errata/RHSA-2020:0130
- https://access.redhat.com/errata/RHSA-2020:0134
- https://access.redhat.com/security/cve/cve-2020-0602
- https://bugzilla.redhat.com/show_bug.cgi?id=1789623
Frequently Asked Questions
What is the severity of CVE-2020-0602?
The severity of CVE-2020-0602 is high with a severity value of 7.5.
How does the denial of service vulnerability in ASP.NET Core occur?
The denial of service vulnerability in ASP.NET Core occurs due to improper handling of web requests.
Which versions of ASP.NET Core are affected by CVE-2020-0602?
ASP.NET Core versions 2.1, 3.0, 3.0.1, and 3.1 are affected by CVE-2020-0602.
How can I fix CVE-2020-0602?
To fix CVE-2020-0602, update ASP.NET Core to version 3.0.1 or 3.1.1 depending on the installed version.
Where can I find more information about CVE-2020-0602?
More information about CVE-2020-0602 can be found at the following references: - Microsoft Security Guidance Advisory: [link1] - ASP.NET GitHub Announcements: [link2] - Redhat Errata: [link3]
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- collector/nvd-index
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-0602
- agent/software-canonical-lookup
- vendor/microsoft
- canonical/microsoft asp.net core
- version/microsoft asp.net core/2.1
- version/microsoft asp.net core/3.0
- version/microsoft asp.net core/3.1
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/8.0
- canonical/redhat enterprise linux eus
- version/redhat enterprise linux eus/8.1
- package-manager/redhat