← Back

CVE-2020-1597

nvd nist
Published: Aug 17, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests.

Affected (7)

3 products
Asp.net Core
Visual Studio 2017
Visual Studio 2019
1 product
Fedora
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Version 2.1
Version 3.1
From 15.0 to 15.8
Microsoft
From 16.0 to 16.3
From 16.5 to 16.6
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Version 32
Version 33

Timeline

No history available yet.