Search for packages
| purl | pkg:nuget/Microsoft.AspNetCore.All@2.0.7 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-ct2x-rftj-tydp
Aliases: GHSA-cgpw-2gph-2r9g GMS-2018-36 GMS-2018-38 GMS-2018-44 |
Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core Microsoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated. An attacker who successfully exploited this vulnerability could cause a denial of service attack. The update addresses the vulnerability by correcting how ASP.NET Core handles such requests. |
Affected by 1 other vulnerability. Affected by 9 other vulnerabilities. |
|
VCID-vyrd-u846-8kdu
Aliases: GHSA-3m2r-q8x3-xmf7 GMS-2018-37 GMS-2018-39 GMS-2018-40 GMS-2018-43 |
Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.Server.Kestrel.Core, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions, and Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv Microsoft made an internal discovery of a security vulnerability in version 2.x of ASP.NET Core where a specially crafted request can cause excess resource consumption in Kestrel. |
Affected by 2 other vulnerabilities. |
|
VCID-zdjb-98e7-6bgn
Aliases: CVE-2018-8292 GHSA-7jgj-8wvc-jh57 |
Microsoft Security Advisory CVE-2018-8292: .NET Core Information Disclosure Vulnerability |
Affected by 10 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||