May 2020: .NET Core & .NET Framework Denial of Service Vulnerability
CVE-2020-1108 Published on May 21, 2020

.NET Core & .NET Framework Denial of Service Vulnerability
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application. The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests.

Vendor Advisory NVD


Products Associated with CVE-2020-1108

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft .NET Core
 
Microsoft Powershell Core
 
Microsoft Visual Studio 2017
 
Microsoft Visual Studio 2019
 
Microsoft Powershell
 
Microsoft Net
 
Microsoft Windows 10
 
Microsoft Windows
 
Microsoft Windows Server 2016
 
Microsoft Windows 7
 
Microsoft Windows 8.1
 
Microsoft Windows Rt 8 1
 
Microsoft Windows Server 2008
 
Microsoft Windows Server 2012
 
Microsoft Windows Server 2019
 
Microsoft .NET Framework
 

Affected Versions

Microsoft .NET 5.0: Microsoft .NET Core 2.1: Microsoft .NET Core 3.1: Microsoft .NET Framework 2.0 Service Pack 2: Microsoft .NET Framework 3.0 Service Pack 2: Microsoft .NET Framework 3.5: Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2: Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2: Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2: Microsoft .NET Framework 3.5 AND 4.7.2: Microsoft .NET Framework 3.5 AND 4.8: Microsoft .NET Framework 3.5.1: Microsoft .NET Framework 4.5.2: Microsoft .NET Framework 4.6: Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2: Microsoft .NET Framework 4.8: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8): Microsoft Visual Studio 2019 version 16.0: Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3): Microsoft Visual Studio 2019 version 16.5: Microsoft PowerShell 7.0: Microsoft PowerShell Core 6.2:

Exploit Probability

EPSS
6.25%
Percentile
93.10%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.