Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2021-31957GHSA-MCWM-2WMC-6HV4BIT-DOTNET-2021-31957BIT-DOTNET-SDK-2021-31957

ASP.NET Core Denial of Service Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 16.4.23, 16.7.16, 16.9.7, 16.10.1, 8.10.1, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

ASP.NET Core Denial of Service Vulnerability

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Microsoft Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)

    From 16.0 · fixed in 16.4.23

  • Microsoft Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)

    From 16.0.0 · fixed in 16.7.16

  • Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)

    From 15.0.0 · fixed in 16.9.7

  • Microsoft Microsoft Visual Studio 2019 version 16.10 (includes 16.0 - 16.9)

    From 16.10.0 · fixed in 16.10.1

  • Microsoft Visual Studio 2019 for Mac version 8.10

    From 8.1.0 · fixed in 8.10.1

  • Microsoft .NET Core 3.1

    From 3.1 · fixed in 3.1.16

  • Microsoft .NET 5.0

    From 5.0.0 · fixed in 5.0.7

  • dotnetBitnami

    From 5.0.0 · fixed in 5.0.7

  • dotnet-sdkBitnami

    From 5.0.0 · fixed in 5.0.7

References 5

portal.msrc.microsoft.com

lists.fedoraproject.org