CVE-2019-0982

Description

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

How to fix CVE-2019-0982

To remediate CVE-2019-0982, upgrade the affected package to a fixed version below.

• NuGet/Microsoft.AspNetCore.SignalR.Protocols.MessagePack—upgrade to 1.1.5 or later

Is CVE-2019-0982 being exploited?

Moderate — EPSS is 6.7%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (1)

• >= 1.1.0, < 1.1.5

CVSS scores

References (4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2019-0982
• WEBgithub.com/aspnet/Announcements/issues/359
• WEBgithub.com/github/advisory-database/issues/302
• WEBportal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0982