PT-2019-2263 · Microsoft+2 · .Net Framework+4

Published 2019-05-14 · Updated 2022-05-24 · CVE-2019-0981

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions .NET Core versions (affected versions not specified) .NET Framework versions (affected versions not specified) PowerShell Core versions (affected versions not specified)

Description The issue is related to errors in request processing, allowing a remote attacker to cause a denial of service by sending specially crafted requests. This can lead to the disruption of .NET Framework or .NET Core web applications. The vulnerability can be exploited by unauthenticated remote attackers.

Recommendations For .NET Core, update to a version that includes the fix for this issue. For .NET Framework, apply the configuration changes recommended by the vendor to mitigate the risk of exploitation. For PowerShell Core, restrict access to vulnerable modules to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-19

CWE-20

Related Identifiers

BDU:2019-02034

CESA-2019_1259

CVE-2019-0981

GHSA-5F2M-466J-3848

RHSA-2019:1236

RHSA-2019:1259

RHSA-2019_1259

Affected Products

.Net Framework

Centos

Net Core

Powershell Core

Red Hat

References · 23

• https://osv.dev/vulnerability/CVE-2019-0981 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0757 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/680637 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0820 · Security Note
• https://bdu.fstec.ru/vul/2019-01933 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0980 · Security Note
• https://access.redhat.com/errata/RHSA-2019:1259 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0981 · Security Note
• https://bdu.fstec.ru/vul/2019-01186 · Security Note
• https://bdu.fstec.ru/vul/2019-02030 · Security Note
• https://bdu.fstec.ru/vul/2019-02034 · Security Note
• https://osv.dev/vulnerability/GHSA-5f2m-466j-3848 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2019-1259.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-0981 · Security Note