IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
Ohne Score

CVE-2020-1108.NET Core & .NET Framework Denial of Service Vulnerability

Microsoft .NET 5.0; Microsoft .NET Core 2.1; Microsoft .NET Core 3.1; Microsoft Microsoft .NET Framework 2.0 Service Pack 2 Veröffentlicht: (vor 6 Jahren)

Beschreibung

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application. The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Microsoft Microsoft .NET Framework 2.0 Service Pack 2 2.0.0 – < publication
Microsoft Microsoft .NET Framework 3.0 Service Pack 2 3.0.0 – < publication
Microsoft Microsoft .NET Framework 3.5 3.5.0 – < publication
Microsoft Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 3.5.0 – < publication
Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 3.0.0.0 – < publication
Microsoft Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 3.0 – < publication
Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 4.7.0 – < publication
Microsoft Microsoft .NET Framework 3.5 AND 4.8 4.8.0 – < publication
Microsoft Microsoft .NET Framework 3.5.1 3.5.0 – < publication
Microsoft Microsoft .NET Framework 4.5.2 4.0.0.0 – < publication
Microsoft Microsoft .NET Framework 4.6 4.0.0.0 – < publication
Microsoft Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 4.0.0.0 – < publication
Microsoft Microsoft .NET Framework 4.8 4.8.0 – < publication
Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) 15.9.0 – < publication
Microsoft Microsoft Visual Studio 2019 version 16.0 16.0 – < publication
Microsoft Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) 16.0 – < publication
Microsoft Microsoft Visual Studio 2019 version 16.5 16.0 – < publication
microsoft .net 4.8.0 – < publication
Microsoft .NET 5.0 5.0.0 – < publication
microsoft .net core 3.1 – < publication
Microsoft .NET Core 2.1 2.1 – < publication
Microsoft .NET Core 3.1 3.1 – < publication
microsoft .net framework 4.0.0.0 – < publication
Microsoft PowerShell 7.0 7.0.0 – < publication
microsoft powershell core 6.0 – < publication
Microsoft PowerShell Core 6.2 6.0 – < publication
microsoft visual studio 2017 15.9.0 – < publication
microsoft visual studio 2019 16.0 – < publication

Referenzen und Patches

Neue CVEs im selben Produkt — .NET

7.8Hoch
CVE-2026-114148

ASP.NET Core Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

9.2Kritisch
CVE-2026-111497 KEV

Out-of-Bounds Write in Google Brotli Decoder

Google Brotli; Siemens Cloud Connector Configurator; Siemens Common Configurator (CC on IEM); Siemens Common Configurator on Device (CC on Edge)

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

83%EPSS
7.5Hoch
CVE-2026-97801

.NET Framework Tampering Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

8.8Hoch
CVE-2026-102869

.NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8; Microsoft Microsoft .NET Framework 3.5 AND 4.8.1

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

8.8Hoch
CVE-2026-102870

ASP.NET Core Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.