Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

GHSA-3w5p-jhp5-c29q

GitHub Security Advisory

.NET Core & .NET Framework Denial of Service Vulnerability

✓ GitHub Reviewed HIGH Has CVE
View on GitHub

Advisory Details

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.

Affected Packages

NuGet Microsoft.NETCore.App
Affected versions: 2.1.0 (fixed in 2.1.18)
NuGet Microsoft.NETCore.App.Runtime.linux-arm
Affected versions: 3.1.0 (fixed in 3.1.4)
NuGet Microsoft.NETCore.App.Runtime.linux-arm64
Affected versions: 3.1.0 (fixed in 3.1.4)
NuGet Microsoft.NETCore.App.Runtime.linux-musl-arm64
Affected versions: 3.1.0 (fixed in 3.1.4)
NuGet Microsoft.NETCore.App.Runtime.linux-musl-x64
Affected versions: 3.1.0 (fixed in 3.1.4)
NuGet Microsoft.NETCore.App.Runtime.linux-x64
Affected versions: 3.1.0 (fixed in 3.1.4)
NuGet Microsoft.NETCore.App.Runtime.osx-x64
Affected versions: 3.1.0 (fixed in 3.1.4)
NuGet Microsoft.NETCore.App.Runtime.rhel.6-x64
Affected versions: 3.1.0 (fixed in 3.1.4)
NuGet Microsoft.NETCore.App.Runtime.win-arm
Affected versions: 3.1.0 (fixed in 3.1.4)
NuGet Microsoft.NETCore.App.Runtime.win-arm64
Affected versions: 3.1.0 (fixed in 3.1.4)
NuGet Microsoft.NETCore.App.Runtime.win-x64
Affected versions: 3.1.0 (fixed in 3.1.4)
NuGet Microsoft.NETCore.App.Runtime.win-x86
Affected versions: 3.1.0 (fixed in 3.1.4)

Related CVEs

CVE-2020-1108

Key Information

GHSA ID
GHSA-3w5p-jhp5-c29q
Published
May 24, 2022 5:18 PM
Last Modified
October 21, 2022 9:05 PM
CVSS Score
7.5 /10
Primary Ecosystem
NuGet
Primary Package
Microsoft.NETCore.App
GitHub Reviewed
✓ Yes

Dataset

Last updated: July 28, 2025 6:37 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.