Puansız

CVE-2020-1108.NET Core & .NET Framework Denial of Service Vulnerability

Microsoft .NET 5.0; Microsoft .NET Core 2.1; Microsoft .NET Core 3.1; Microsoft Microsoft .NET Framework 2.0 Service Pack 2 Yayım: 2020-05-22 01:53 (6 yıl önce)

Açıklama

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application. The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
Microsoft	Microsoft .NET Framework 2.0 Service Pack 2	2.0.0 – < publication
Microsoft	Microsoft .NET Framework 3.0 Service Pack 2	3.0.0 – < publication
Microsoft	Microsoft .NET Framework 3.5	3.5.0 – < publication
Microsoft	Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2	3.5.0 – < publication
Microsoft	Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2	3.0.0.0 – < publication
Microsoft	Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2	3.0 – < publication
Microsoft	Microsoft .NET Framework 3.5 AND 4.7.2	4.7.0 – < publication
Microsoft	Microsoft .NET Framework 3.5 AND 4.8	4.8.0 – < publication
Microsoft	Microsoft .NET Framework 3.5.1	3.5.0 – < publication
Microsoft	Microsoft .NET Framework 4.5.2	4.0.0.0 – < publication
Microsoft	Microsoft .NET Framework 4.6	4.0.0.0 – < publication
Microsoft	Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2	4.0.0.0 – < publication
Microsoft	Microsoft .NET Framework 4.8	4.8.0 – < publication
Microsoft	Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)	15.9.0 – < publication
Microsoft	Microsoft Visual Studio 2019 version 16.0	16.0 – < publication
Microsoft	Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)	16.0 – < publication
Microsoft	Microsoft Visual Studio 2019 version 16.5	16.0 – < publication
microsoft	.net	4.8.0 – < publication
Microsoft	.NET 5.0	5.0.0 – < publication
microsoft	.net core	3.1 – < publication
Microsoft	.NET Core 2.1	2.1 – < publication
Microsoft	.NET Core 3.1	3.1 – < publication
microsoft	.net framework	4.0.0.0 – < publication
Microsoft	PowerShell 7.0	7.0.0 – < publication
microsoft	powershell core	6.0 – < publication
Microsoft	PowerShell Core 6.2	6.0 – < publication
microsoft	visual studio 2017	15.9.0 – < publication
microsoft	visual studio 2019	16.0 – < publication

Kaynaklar ve yamalar

.NET Core & .NET Framework Denial of Service Vulnerability vendor-advisorypatch

CVSS puanı

Henüz puanlanmadı. CNA, CISA veya NVD puan verdiğinde burada görünür.

EPSS (30 günde istismar olasılığı)

6.46%

tüm CVE'lerin %94'inden yüksek

Zaman çizelgesi

Numara ayrıldı2019-11-04
Yayımlandı2020-05-22 01:53
IP-DB'ye ulaştı2026-10-25 00:05
Son güncelleme2026-08-19 19:34

Numarayı veren (CNA): microsoft

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — .NET

7.8Yüksek

CVE-2026-114148 9 gün önce

ASP.NET Core Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

9.2Kritik

CVE-2026-111497 KEV 16 gün önce

Out-of-Bounds Write in Google Brotli Decoder

Google Brotli; Siemens Cloud Connector Configurator; Siemens Common Configurator (CC on IEM); Siemens Common Configurator on Device (CC on Edge)

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

83%EPSS

9.8Kritik

CVE-2026-105016 25 gün önce

Microsoft QUIC Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

1.7%EPSS

7.5Yüksek

CVE-2026-97801 25 gün önce

.NET Framework Tampering Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

8.8Yüksek

CVE-2026-102869 25 gün önce

.NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8; Microsoft Microsoft .NET Framework 3.5 AND 4.8.1

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

8.8Yüksek

CVE-2026-102870 25 gün önce

ASP.NET Core Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.