Test ID:	1.3.6.1.4.1.25623.1.0.813043
Category:	Windows
Title:	ASP.NET Core Denial of Service Vulnerability - Windows
Summary:	ASP.NET Core is prone to a denial of service (DoS) vulnerability.
Description:	Summary: ASP.NET Core is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw exists in the way that .NET Core handles specially crafted requests, causing a hash collision. Vulnerability Impact: Successful exploitation will allow an attacker to cause performance to degrade significantly enough to cause a denial of service condition. Affected Software/OS: .NET Core 1.0.9 and prior, 1.1.x to 1.1.6, and 2.0.x to 2.0.5 and .NET Core SDK prior to versions 1.1.8, 2.1.x to 2.1.101. Solution: Upgrade to .NET Core runtimes to versions 1.0.10, 1.1.7 or 2.0.6 or later or upgrade to .NET Core SDK to versions 1.1.8 or 2.1.101 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-0875 BugTraq ID: 103225 http://www.securityfocus.com/bid/103225 RedHat Security Advisories: RHSA-2018:0522 https://access.redhat.com/errata/RHSA-2018:0522 http://www.securitytracker.com/id/1040505
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.