Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
| Vendor | Product | Versions | |
|---|---|---|---|
| microsoft | asp.net core | 11.0 – < 11.0 RC1 | |
| Microsoft | ASP.NET Core 10.0 | 10.0 – < 10.0.12 | |
| Microsoft | ASP.NET Core 11.0 | 11.0 – < 11.0 RC1 | |
| Microsoft | ASP.NET Core 8.0 | 8.0 – < 8.0.31 | |
| Microsoft | ASP.NET Core 9.0 | 9.0 – < 9.0.20 | |
| Microsoft | Microsoft Visual Studio 2022 version 17.14 | 17.14.0 – < 17.14.40 | |
| Microsoft | Microsoft Visual Studio 2026 version 18.9 | 18.9.0 – < 18.9.3 | |
| microsoft | .net | 10.0.0 – < 10.0.12 | |
| Microsoft | .NET 10.0 runtime | 10.0.0 – < 10.0.12 | |
| Microsoft | .NET 8.0 runtime | 8.0.0 – < 8.0.31 | |
| Microsoft | .NET 9.0 runtime | 9.0.0 – < 9.0.20 | |
| microsoft | visual studio 2022 | 17.14.0 – < 17.14.40 | |
| microsoft | visual studio 2026 | 18.9.0 – < 18.9.3 |
cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:* ≥ 8.0.0 < 8.0.28cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:* ≥ 9.0.0 < 9.0.17cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:* ≥ 10.0.0 < 10.0.9cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:* ≥ 11.0.0cpe:2.3:a:microsoft:asp.net_core:11.0:rc1:*:*:*:*:*:*cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* ≥ 17.14.0 < 17.14.40cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:* ≥ 18.9.0 < 18.9.3cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* ≥ 8.0.0 < 8.0.31cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* ≥ 9.0.0 < 9.0.20cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* ≥ 10.0.0 < 10.0.12Our free, open-source honeypot sensor waits on ports your server does not use and reports the scanners and attackers that connect to a shared blocklist.