A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2249 advisory.

    .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several     new APIs, and it includes a CLR implementation.

    New versions of .NET Core that address security vulnerabilities are now available. The updated versions     are .NET Core SDK 3.1.104 and .NET Core Runtime 3.1.4.

    Security Fix(es):

    * dotnet: Denial of service via untrusted input (CVE-2020-1108)
    * dotnet: Denial of service due to infinite loop (CVE-2020-1161)

    Default inclusions for applications built with .NET Core have been updated to reference the newest     versions and their security fixes.

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2250 advisory.

    [3.1.104-2.0.2]
    - Update patch to support 8.2 (alexander.burmashev@oracle.com)

    [3.1.104-2.0.1]
    - support OL release scheme (alexander.burmashev@oracle.com)

    [3.1.104-2]
    - Update to new release
    - Resolves: RHBZ#1833091

    [3.1.104-1]
    - Update to .NET Core Runtime 3.1.4 and SDK 3.1.104
    - Resolves: RHBZ#1833091

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2250 advisory.

    .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several     new APIs, and it includes a CLR implementation.

    New versions of .NET Core that address security vulnerabilities are now available. The updated versions     are .NET Core SDK 3.1.104 and .NET Core Runtime 3.1.4.

    Security Fixes:

    * dotnet: Denial of service via untrusted input (CVE-2020-1108)
    * dotnet: Denial of service due to infinite loop (CVE-2020-1161)

    Default inclusions for applications built with .NET Core have been updated to reference the newest     versions and their security fixes.

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft ASP.NET Core installation on the remote host is version 3.x < 3.1.4. It is, therefore, affected by a denial of service (DoS) vulnerability when ASP.NET Core improperly handles web requests. An unauthenticated, remote attacker can exploit this issue, via sending a specially crafted requests to the ASP.NET Core application to cause the application to stop responding.

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities :

  - A denial of service vulnerability exists when .NET Core or .NET     Framework improperly handles web requests. An attacker who     successfully exploited this vulnerability could cause a denial of     service against a .NET Core or .NET Framework web application. The     vulnerability can be exploited remotely, without authentication.
    (CVE-2020-1108)

  - A denial of service vulnerability exists when ASP.NET Core     improperly handles web requests. An attacker who successfully     exploited this vulnerability could cause a denial of service against     an ASP.NET Core web application. The vulnerability can be exploited     remotely, without authentication. (CVE-2020-1161)

ID	Name	Product	Family	Severity
170344	RHEL 7 : .NET Core on Red Hat Enterprise Linux (RHSA-2020:2249)	Nessus	Red Hat Local Security Checks	high
137345	Oracle Linux 8 : dotnet3.1 (ELSA-2020-2250)	Nessus	Oracle Linux Local Security Checks	high
136820	RHEL 8 : dotnet3.1 (RHSA-2020:2250)	Nessus	Red Hat Local Security Checks	high
136527	Security Update for Microsoft ASP.NET Core (DoS) (May 2020)	Nessus	Windows	high
136515	Security Updates for Microsoft Visual Studio Products (May 2020)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2020-1161

high

Tenable Plugins

high

high

high

high

high