PT-2019-2263 · Microsoft+2 · .Net Framework+4

Publicado 2019-05-14 · Atualizado 2022-05-24 · CVE-2019-0981

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions .NET Core versions (affected versions not specified) .NET Framework versions (affected versions not specified) PowerShell Core versions (affected versions not specified)

Description The issue is related to errors in request processing, allowing a remote attacker to cause a denial of service by sending specially crafted requests. This can lead to the disruption of .NET Framework or .NET Core web applications. The vulnerability can be exploited by unauthenticated remote attackers.

Recommendations For .NET Core, update to a version that includes the fix for this issue. For .NET Framework, apply the configuration changes recommended by the vendor to mitigate the risk of exploitation. For PowerShell Core, restrict access to vulnerable modules to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Enumeração de Fraquezas

CWE-19

CWE-20

Identificadores relacionados

BDU:2019-02034

CESA-2019_1259

CVE-2019-0981

GHSA-5F2M-466J-3848

RHSA-2019:1236

RHSA-2019:1259

RHSA-2019_1259

Produtos afetados

.Net Framework

Centos

Net Core

Powershell Core

Red Hat

Referências · 23

• https://github.com/github/advisory-database/issues/302 · Nota
• https://github.com/dotnet/announcements/issues/113 · Nota
• https://osv.dev/vulnerability/CVE-2019-0981 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0757 · Nota de Segurança
• https://safe-surf.ru/specialists/bulletins-nkcki/680637 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0820 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-01933 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0980 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2019:1259 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2019-0757 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0981 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-0981 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2019-0820 · Nota
• https://bdu.fstec.ru/vul/2019-01186 · Nota de Segurança