MicrosoftRadar Independent status for Microsoft services

.NET Core Denial of Service Vulnerability

CVE-2019-1301 is a denial of service vulnerability in .NET Core (rated Important).

1 version

Facts

Microsoft id
CVE-2019-1301
Products
.NET Core
Severity
Important
Impact
Denial of Service
Exploited
No
Publicly disclosed
No
Exploitability
Exploitation Less Likely
Customer action required
Yes
Release
2019-Sep
Assigned by
Microsoft
MSRC revision
2.0
First captured by us
(from our first import of this list)
Microsoft last modified
Source
Security updates · open the original at Microsoft

Microsoft's revision notes

  1. Revision 1.0, 2019-09-10: Information published.
  2. Revision 2.0, 2019-09-12: Revised the Security Updates table to include PowerShell Core 6.1 and 6.2 because they are affected by CVE-2019-1301. See https://github.com/PowerShell/PowerShell/security/advisories/GHSA-62gw-3rmj-wmp2 for more information.

Microsoft says

A denial of service vulnerability exists when .NET Core improperly handles web requests.

Security updates,

Read Microsoft's full post

What Microsoft changed

One version so far. If Microsoft edits it, each change shows here with what was removed and added.

  1. First version we captured ·

    The text as we first saw it

    Seen by us · Microsoft's timestamp · Microsoft's page

Mentioning the same Microsoft ids

Last updated