CVE-2020-1108: High severity microsoft .net framework vulnerability
Published May 21, 2020
·Updated
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.
Affected Software
53 affected components
Microsoft .NET=5.0-preview1
Microsoft .NET=5.0-preview2
Microsoft .NET=5.0-preview3
Microsoft .NET Core>=2.1<=2.1.18
Microsoft .NET Core>=3.0<=3.1.4
Microsoft .NET Framework=2.0-sp2
Microsoft .NET Framework=3.0-sp2
Microsoft .NET Framework=4.6
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=sp2
Microsoft .NET Framework=3.5
Microsoft Windows 8.1
Microsoft Windows 8.1
Microsoft .NET Framework=4.5.2
Microsoft .NET Framework=4.6.1
Microsoft .NET Framework=4.6.2
Microsoft .NET Framework=4.7
Microsoft .NET Framework=4.7.1
Microsoft .NET Framework=4.7.2
Microsoft .NET Framework=4.8
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows 10=1607
Microsoft Windows 10=1607
Microsoft Windows Server 2016
Microsoft Windows 10
Microsoft Windows 10
Microsoft Windows 10=1709
Microsoft Windows 10=1709
Microsoft Windows 10=1709
Microsoft Windows 10=1803
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows Server 2019
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10=1903
Microsoft Windows 10=1903
Microsoft Windows 10=1903
Microsoft Windows 10=1909
Microsoft .NET Framework=3.5.1
Microsoft Windows 7=sp1
Microsoft Windows 7=sp1
Microsoft Windows 10=1803
Microsoft Windows RT 8.1
Microsoft .NET Core=2.1
Microsoft .NET Core=3.1
Microsoft Visual Studio 2017=15.9
Microsoft Visual Studio 2019=16.0
Microsoft Visual Studio 2019=16.4
Microsoft Visual Studio 2019=16.5
Microsoft PowerShell=7.0
Microsoft PowerShell Core=6.2
Remediation
Event History
May 21, 2020
CVE Published
via MITRE·10:53 PM
Data Sourced
via MITRE·10:53 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this denial of service vulnerability?
The vulnerability ID of this denial of service vulnerability is CVE-2020-1108.
2
What is the severity level of CVE-2020-1108?
CVE-2020-1108 has a severity level of high, with a CVSS score of 7.5.
3
Which software is affected by CVE-2020-1108?
CVE-2020-1108 affects .NET Core, .NET Framework, and other related software versions.
4
How does CVE-2020-1108 manifest as a vulnerability?
CVE-2020-1108 is a denial of service vulnerability that occurs due to improper handling of web requests in .NET Core and .NET Framework.
5
Where can I find more information about CVE-2020-1108?
More information about CVE-2020-1108 can be found at the following reference link: [CVE-2020-1108](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1108).