{"id":"GHSA-mv2r-q4g5-j8q5","summary":"Denial of service in ASP.NET Core","details":"A denial of service vulnerability exists when OData Library improperly handles web requests, aka \"OData Denial of Service Vulnerability.\" This affects Microsoft.Data.OData.","aliases":["CVE-2018-8269"],"modified":"2024-11-28T05:40:32.219218Z","published":"2018-10-16T19:58:31Z","database_specific":{"cwe_ids":[],"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2020-06-16T21:47:12Z","nvd_published_at":null},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8269"},{"type":"WEB","url":"https://github.com/aspnet/Announcements/issues/385"},{"type":"WEB","url":"https://github.com/github/advisory-database/issues/302"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-mv2r-q4g5-j8q5"},{"type":"WEB","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8269"},{"type":"WEB","url":"https://www.exploit-db.com/exploits/46101"}],"affected":[{"package":{"name":"Microsoft.Data.OData","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.Data.OData"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.4"}]}],"versions":["5.0.0.50403","5.0.1","5.0.1-rc","5.0.2","5.0.2-rc","5.1.0","5.1.0-rc","5.1.0-rc1","5.1.0-rc2","5.2.0","5.2.0-rc1","5.3.0","5.3.0-rc1","5.4.0","5.4.0-rc1","5.5.0","5.5.0-alpha1","5.5.0-alpha2","5.5.0-rc1","5.6.0","5.6.0-alpha1","5.6.0-rc1","5.6.1","5.6.2","5.6.3","5.6.4","5.6.5-beta","5.7.0","5.7.0-beta","5.7.0-rc","5.8.0","5.8.0-beta","5.8.1","5.8.2","5.8.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-mv2r-q4g5-j8q5/GHSA-mv2r-q4g5-j8q5.json"}},{"package":{"name":"Microsoft.AspNetCore.DataProtection.AzureStorage","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.DataProtection.AzureStorage"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.1.13"}]}],"versions":["2.1.0","2.1.1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-mv2r-q4g5-j8q5/GHSA-mv2r-q4g5-j8q5.json"}},{"package":{"name":"Microsoft.AspNetCore.DataProtection.AzureStorage","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.DataProtection.AzureStorage"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.7"}]}],"versions":["2.2.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-mv2r-q4g5-j8q5/GHSA-mv2r-q4g5-j8q5.json"}},{"package":{"name":"Microsoft.AspNetCore.All","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.All"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.1.13"}]}],"versions":["2.1.0","2.1.1","2.1.10","2.1.11","2.1.12","2.1.2","2.1.3","2.1.4","2.1.5","2.1.6","2.1.7","2.1.8","2.1.9"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-mv2r-q4g5-j8q5/GHSA-mv2r-q4g5-j8q5.json"}},{"package":{"name":"Microsoft.AspNetCore.All","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.All"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.7"}]}],"versions":["2.2.0","2.2.1","2.2.2","2.2.3","2.2.4","2.2.5","2.2.6"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-mv2r-q4g5-j8q5/GHSA-mv2r-q4g5-j8q5.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}