cnvd-2020-20377
Vulnerability from cnvd

Title: Microsoft .NET Core和Microsoft ASP.NET Core拒绝服务漏洞

Description:

Microsoft .NET Core和Microsoft ASP.NET Core都是美国微软（Microsoft）公司的产品。.NET Core是一套免费的开源开发平台。该平台具有多语言支持和跨平台等特点。Microsoft ASP.NET Core是一框跨平台开源框架。该框架用于构建Web应用、物联网应用和移动后端等基于云的应用程序。

Microsoft .NET Core和Microsoft ASP.NET Core中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。远程未认证攻击者可利用该漏洞导致.NET Framework或.NET Core应用程序拒绝服务。

Severity: 中

Patch Name: Microsoft .NET Core和Microsoft ASP.NET Core拒绝服务漏洞的补丁

Patch Description:

Microsoft .NET Core和Microsoft ASP.NET Core都是美国微软（Microsoft）公司的产品。.NET Core是一套免费的开源开发平台。该平台具有多语言支持和跨平台等特点。Microsoft ASP.NET Core是一框跨平台开源框架。该框架用于构建Web应用、物联网应用和移动后端等基于云的应用程序。

Microsoft .NET Core和Microsoft ASP.NET Core中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。远程未认证攻击者可利用该漏洞导致.NET Framework或.NET Core应用程序拒绝服务。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布漏洞修复程序，请及时关注更新： https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981

Reference: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981

Impacted products
Name
['Microsoft .NET Framework 3.0 SP2', 'Microsoft .NET Framework 2.0 SP2', 'Microsoft .NET Framework 3.5', 'Microsoft .NET Framework 3.5.1', 'Microsoft .Net Framework 3.5', 'Microsoft .Net Framework 4.5.2', 'Microsoft .NET Framework 4.6', 'Microsoft .Net Framework 4.6.1', 'Microsoft .NET Framework 4.6.2', 'Microsoft .NET Framework 4.7', 'Microsoft .NET Core 1.0', 'Microsoft .NET Core 1.1', 'Microsoft .NET Framework 4.7.1', 'Microsoft .NET Framework 4.7.2', 'Microsoft .NET Framework 4.5.2', 'Microsoft .NET Framework 4.6.1', 'Microsoft ASP.NET Core 2.1', 'Microsoft ASP.NET Core 2.2', 'Microsoft .NET Framework 4.8']
Show details on source website

To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-0981"
    }
  },
  "description": "Microsoft .NET Core\u548cMicrosoft ASP.NET Core\u90fd\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002.NET Core\u662f\u4e00\u5957\u514d\u8d39\u7684\u5f00\u6e90\u5f00\u53d1\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u5177\u6709\u591a\u8bed\u8a00\u652f\u6301\u548c\u8de8\u5e73\u53f0\u7b49\u7279\u70b9\u3002Microsoft ASP.NET Core\u662f\u4e00\u6846\u8de8\u5e73\u53f0\u5f00\u6e90\u6846\u67b6\u3002\u8be5\u6846\u67b6\u7528\u4e8e\u6784\u5efaWeb\u5e94\u7528\u3001\u7269\u8054\u7f51\u5e94\u7528\u548c\u79fb\u52a8\u540e\u7aef\u7b49\u57fa\u4e8e\u4e91\u7684\u5e94\u7528\u7a0b\u5e8f\u3002\n\nMicrosoft .NET Core\u548cMicrosoft ASP.NET Core\u4e2d\u5b58\u5728\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7f51\u7edc\u7cfb\u7edf\u6216\u4ea7\u54c1\u7684\u4ee3\u7801\u5f00\u53d1\u8fc7\u7a0b\u4e2d\u5b58\u5728\u8bbe\u8ba1\u6216\u5b9e\u73b0\u4e0d\u5f53\u7684\u95ee\u9898\u3002\u8fdc\u7a0b\u672a\u8ba4\u8bc1\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4.NET Framework\u6216.NET Core\u5e94\u7528\u7a0b\u5e8f\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-20377",
  "openTime": "2020-03-31",
  "patchDescription": "Microsoft .NET Core\u548cMicrosoft ASP.NET Core\u90fd\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002.NET Core\u662f\u4e00\u5957\u514d\u8d39\u7684\u5f00\u6e90\u5f00\u53d1\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u5177\u6709\u591a\u8bed\u8a00\u652f\u6301\u548c\u8de8\u5e73\u53f0\u7b49\u7279\u70b9\u3002Microsoft ASP.NET Core\u662f\u4e00\u6846\u8de8\u5e73\u53f0\u5f00\u6e90\u6846\u67b6\u3002\u8be5\u6846\u67b6\u7528\u4e8e\u6784\u5efaWeb\u5e94\u7528\u3001\u7269\u8054\u7f51\u5e94\u7528\u548c\u79fb\u52a8\u540e\u7aef\u7b49\u57fa\u4e8e\u4e91\u7684\u5e94\u7528\u7a0b\u5e8f\u3002\r\n\r\nMicrosoft .NET Core\u548cMicrosoft ASP.NET Core\u4e2d\u5b58\u5728\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7f51\u7edc\u7cfb\u7edf\u6216\u4ea7\u54c1\u7684\u4ee3\u7801\u5f00\u53d1\u8fc7\u7a0b\u4e2d\u5b58\u5728\u8bbe\u8ba1\u6216\u5b9e\u73b0\u4e0d\u5f53\u7684\u95ee\u9898\u3002\u8fdc\u7a0b\u672a\u8ba4\u8bc1\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4.NET Framework\u6216.NET Core\u5e94\u7528\u7a0b\u5e8f\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft .NET Core\u548cMicrosoft ASP.NET Core\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Microsoft .NET Framework 3.0 SP2",
      "Microsoft .NET Framework 2.0 SP2",
      "Microsoft .NET Framework 3.5",
      "Microsoft .NET Framework 3.5.1",
      "Microsoft .Net Framework 3.5",
      "Microsoft .Net Framework 4.5.2",
      "Microsoft .NET Framework 4.6",
      "Microsoft .Net Framework 4.6.1",
      "Microsoft .NET Framework 4.6.2",
      "Microsoft .NET Framework 4.7",
      "Microsoft .NET Core 1.0",
      "Microsoft .NET Core 1.1",
      "Microsoft .NET Framework 4.7.1",
      "Microsoft .NET Framework 4.7.2",
      "Microsoft .NET Framework 4.5.2",
      "Microsoft .NET Framework 4.6.1",
      "Microsoft ASP.NET Core 2.1",
      "Microsoft ASP.NET Core 2.2",
      "Microsoft .NET Framework 4.8"
    ]
  },
  "referenceLink": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981",
  "serverity": "\u4e2d",
  "submitTime": "2019-05-15",
  "title": "Microsoft .NET Core\u548cMicrosoft ASP.NET Core\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.