CVE-2021-31957CWE-400denial-of-service

CVE-2021-31957

Medium · published June 9, 2021

CVSS v3.1
5.9
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

ASP.NET Core Denial of Service Vulnerability

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.05138 · 92.4th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-06-09T03:15Z
Affected products (6)
ProductVersionsFixed in
microsoft/.net≥ 5.0, ≤ 5.0.6—
microsoft/.net_core≥ 3.1, ≤ 3.1.15—
microsoft/visual_studio_2019≥ 16.0, ≤ 16.10—
microsoft/visual_studio_2019all versions—
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
References (10)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4PRVVLXXQEF4SEJOBV3VRJHGX7YHY2CG/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVCDYIP4A6DDRT7G6P3ZW6PKNK2DNWJ2/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMHWHRRYDHKM6BIINW5V7OCSW4SDWB4W/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMAO4NG2OQ4PCXUQWMNSCMYWLIJJY6UY/ · [email protected]https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31957 · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4PRVVLXXQEF4SEJOBV3VRJHGX7YHY2CG/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVCDYIP4A6DDRT7G6P3ZW6PKNK2DNWJ2/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMHWHRRYDHKM6BIINW5V7OCSW4SDWB4W/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMAO4NG2OQ4PCXUQWMNSCMYWLIJJY6UY/ · af854a3a-2127-422b-91ae-364da2661108https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31957 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 08 JUN 22:46Z
    ASP.NET Core Denial of Service Vulnerability
    cvelistv5