CVE-2020-1597 in Microsoft and Fedora Project Products
Published on August 17, 2020
ASP.NET Core Denial of Service Vulnerability
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application.
The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests.
Products Associated with CVE-2020-1597
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-1597 are published in these products:
Affected Versions
Microsoft ASP.NET Core 2.1:- Version 2.0 and below publication is affected.
- Version 3.0 and below publication is affected.
- Version 16.0 and below publication is affected.
- Version 15.9.0 and below publication is affected.
- Version 16.0 and below publication is affected.
- Version 16.0.0 and below publication is affected.
Exploit Probability
EPSS
8.52%
Percentile
92.26%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.