CVE-2017-11883: Denial of service in ASP.NET Core

May 13, 2022 (updated July 8, 2022)

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka “.NET CORE Denial Of Service Vulnerability”.

References

github.com/advisories/GHSA-f9jc-rrm2-pmfg
github.com/aspnet/Announcements/issues/278
github.com/github/advisory-database/issues/302
nvd.nist.gov/vuln/detail/CVE-2017-11883
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11883

Code Behaviors & Features

Detect and mitigate CVE-2017-11883 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →