Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/9906?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9906?format=api", "vulnerability_id": "VCID-ct2x-rftj-tydp", "summary": "Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core\nMicrosoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated. An attacker who successfully exploited this vulnerability could cause a denial of service attack.\n\nThe update addresses the vulnerability by correcting how ASP.NET Core handles such requests.", "aliases": [ { "alias": "GHSA-cgpw-2gph-2r9g" }, { "alias": "GMS-2018-36" }, { "alias": "GMS-2018-38" }, { "alias": "GMS-2018-44" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/31638?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.All@2.0.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-zdjb-98e7-6bgn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.0.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/1623?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.All@2.1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gtv-nubh-73a9" }, { "vulnerability": "VCID-aqyy-zs6z-v7ar" }, { "vulnerability": "VCID-cja1-29th-9qbf" }, { "vulnerability": "VCID-j761-wgke-97d8" }, { "vulnerability": "VCID-mrdj-nvz7-xyet" }, { "vulnerability": "VCID-n3cs-wjun-vfhe" }, { "vulnerability": "VCID-pa95-mtgb-yuf2" }, { "vulnerability": "VCID-wzeg-jdcg-tfct" }, { "vulnerability": "VCID-z54f-eupv-n7be" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/1687?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.App@2.1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gtv-nubh-73a9" }, { "vulnerability": "VCID-41c2-23ch-x7ft" }, { "vulnerability": "VCID-9zu6-5d4v-f3ht" }, { "vulnerability": "VCID-fm28-azef-buh6" }, { "vulnerability": "VCID-j761-wgke-97d8" }, { "vulnerability": "VCID-n3cs-wjun-vfhe" }, { "vulnerability": "VCID-z54f-eupv-n7be" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App@2.1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/31666?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cju3-5hjk-h3d3" }, { "vulnerability": "VCID-nx74-pj4e-4fde" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/1668?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gtv-nubh-73a9" }, { "vulnerability": "VCID-cju3-5hjk-h3d3" }, { "vulnerability": "VCID-nx74-pj4e-4fde" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.2" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25506?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.All@2.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1t9f-878v-x3h1" }, { "vulnerability": "VCID-7q42-unw8-kufd" }, { "vulnerability": "VCID-bmf7-rsbm-3fb1" }, { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-kn85-7zpm-rqcp" }, { "vulnerability": "VCID-r262-q86s-pue7" }, { "vulnerability": "VCID-stea-61x4-xua6" }, { "vulnerability": "VCID-u9fp-mh5e-6ygh" }, { "vulnerability": "VCID-ucc7-eecy-6qgq" }, { "vulnerability": "VCID-vavn-24a8-e7d4" }, { "vulnerability": "VCID-vyrd-u846-8kdu" }, { "vulnerability": "VCID-zdjb-98e7-6bgn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/25507?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.All@2.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-vyrd-u846-8kdu" }, { "vulnerability": "VCID-zdjb-98e7-6bgn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/177579?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.All@2.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-vyrd-u846-8kdu" }, { "vulnerability": "VCID-zdjb-98e7-6bgn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/177580?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.All@2.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-vyrd-u846-8kdu" }, { "vulnerability": "VCID-zdjb-98e7-6bgn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/177581?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.All@2.0.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-vyrd-u846-8kdu" }, { "vulnerability": "VCID-zdjb-98e7-6bgn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.0.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/31654?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.All@2.0.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-zdjb-98e7-6bgn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.0.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/1620?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.All@2.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gtv-nubh-73a9" }, { "vulnerability": "VCID-41c2-23ch-x7ft" }, { "vulnerability": "VCID-5crw-96ay-a7b7" }, { "vulnerability": "VCID-9zu6-5d4v-f3ht" }, { "vulnerability": "VCID-aqyy-zs6z-v7ar" }, { "vulnerability": "VCID-cja1-29th-9qbf" }, { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-eeub-ree5-dyez" }, { "vulnerability": "VCID-fm28-azef-buh6" }, { "vulnerability": "VCID-j761-wgke-97d8" }, { "vulnerability": "VCID-mrdj-nvz7-xyet" }, { "vulnerability": "VCID-n3cs-wjun-vfhe" }, { "vulnerability": "VCID-pa95-mtgb-yuf2" }, { "vulnerability": "VCID-wzeg-jdcg-tfct" }, { "vulnerability": "VCID-z54f-eupv-n7be" }, { "vulnerability": "VCID-zdjb-98e7-6bgn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/1622?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.All@2.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gtv-nubh-73a9" }, { "vulnerability": "VCID-aqyy-zs6z-v7ar" }, { "vulnerability": "VCID-cja1-29th-9qbf" }, { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-j761-wgke-97d8" }, { "vulnerability": "VCID-mrdj-nvz7-xyet" }, { "vulnerability": "VCID-n3cs-wjun-vfhe" }, { "vulnerability": "VCID-pa95-mtgb-yuf2" }, { "vulnerability": "VCID-wzeg-jdcg-tfct" }, { "vulnerability": "VCID-z54f-eupv-n7be" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1684?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.App@2.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gtv-nubh-73a9" }, { "vulnerability": "VCID-41c2-23ch-x7ft" }, { "vulnerability": "VCID-9zu6-5d4v-f3ht" }, { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-fm28-azef-buh6" }, { "vulnerability": "VCID-j761-wgke-97d8" }, { "vulnerability": "VCID-n3cs-wjun-vfhe" }, { "vulnerability": "VCID-z54f-eupv-n7be" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App@2.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/1686?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.App@2.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gtv-nubh-73a9" }, { "vulnerability": "VCID-41c2-23ch-x7ft" }, { "vulnerability": "VCID-9zu6-5d4v-f3ht" }, { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-fm28-azef-buh6" }, { "vulnerability": "VCID-j761-wgke-97d8" }, { "vulnerability": "VCID-n3cs-wjun-vfhe" }, { "vulnerability": "VCID-z54f-eupv-n7be" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App@2.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/31196?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cju3-5hjk-h3d3" }, { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-nx74-pj4e-4fde" }, { "vulnerability": "VCID-r262-q86s-pue7" }, { "vulnerability": "VCID-vyrd-u846-8kdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/31587?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cju3-5hjk-h3d3" }, { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-nx74-pj4e-4fde" }, { "vulnerability": "VCID-r262-q86s-pue7" }, { "vulnerability": "VCID-vyrd-u846-8kdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/31589?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cju3-5hjk-h3d3" }, { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-nx74-pj4e-4fde" }, { "vulnerability": "VCID-vyrd-u846-8kdu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/31198?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cju3-5hjk-h3d3" }, { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-nx74-pj4e-4fde" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/1665?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gtv-nubh-73a9" }, { "vulnerability": "VCID-cju3-5hjk-h3d3" }, { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-nx74-pj4e-4fde" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/1667?format=api", "purl": "pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gtv-nubh-73a9" }, { "vulnerability": "VCID-cju3-5hjk-h3d3" }, { "vulnerability": "VCID-ct2x-rftj-tydp" }, { "vulnerability": "VCID-nx74-pj4e-4fde" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.1" } ], "references": [ { "reference_url": "https://github.com/aspnet/Announcements/issues/311", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/aspnet/Announcements/issues/311" }, { "reference_url": "https://github.com/advisories/GHSA-cgpw-2gph-2r9g", "reference_id": "GHSA-cgpw-2gph-2r9g", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-cgpw-2gph-2r9g" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": "4.0 - 6.9", "exploitability": "0.5", "weighted_severity": "6.2", "risk_score": 3.1, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ct2x-rftj-tydp" }