Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-1723

Fixed in a distro release EPSS 5%CVSS 7.5

ASP.NET Core and Visual Studio Denial of Service Vulnerability

Published 2021-01-12 · CVE record · OSV

Products: Microsoft ASP.NET Core 3.1, Microsoft ASP.NET Core 5.0, Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3), Microsoft Visual Studio 2019 version 16.8, Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)

Fixed upstream

EcosystemPackageFixed in
NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm3.1.11
NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm5.0.2
NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm643.1.11
NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm645.0.2
NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-arm5.0.2
NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-arm643.1.11
NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-arm645.0.2
NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-x643.1.11
NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-x645.0.2
NuGetMicrosoft.AspNetCore.App.Runtime.linux-x645.0.2
NuGetMicrosoft.AspNetCore.App.Runtime.linux-x643.1.11
NuGetMicrosoft.AspNetCore.App.Runtime.osx-x643.1.11
NuGetMicrosoft.AspNetCore.App.Runtime.osx-x645.0.2
NuGetMicrosoft.AspNetCore.App.Runtime.win-arm3.1.11
NuGetMicrosoft.AspNetCore.App.Runtime.win-arm5.0.2
NuGetMicrosoft.AspNetCore.App.Runtime.win-arm643.1.11
NuGetMicrosoft.AspNetCore.App.Runtime.win-arm645.0.2
NuGetMicrosoft.AspNetCore.App.Runtime.win-x643.1.11
NuGetMicrosoft.AspNetCore.App.Runtime.win-x645.0.2
NuGetMicrosoft.AspNetCore.App.Runtime.win-x863.1.11
NuGetMicrosoft.AspNetCore.App.Runtime.win-x865.0.2
NuGetMicrosoft.AspNetCore.Server.Kestrel.Core2.1.25

Distro releases

ReleasePackageFixed in
Arch Linuxdotnet-runtime5.0.3.sdk103-2
Arch Linuxdotnet-sdk5.0.3.sdk103-2
Red Hat Enterprise Linux 8aspnetcore-runtime-3.10:3.1.11-1.el8_3
Red Hat Enterprise Linux 8aspnetcore-runtime-5.00:5.0.2-2.el8_3
Red Hat Enterprise Linux 8aspnetcore-targeting-pack-3.10:3.1.11-1.el8_3
Red Hat Enterprise Linux 8aspnetcore-targeting-pack-5.00:5.0.2-2.el8_3
Red Hat Enterprise Linux 8dotnet0:5.0.102-2.el8_3
Red Hat Enterprise Linux 8dotnet-apphost-pack-3.10:3.1.11-1.el8_3
Red Hat Enterprise Linux 8dotnet-apphost-pack-3.1-debuginfo0:3.1.11-1.el8_3
Red Hat Enterprise Linux 8dotnet-apphost-pack-5.00:5.0.2-2.el8_3
Red Hat Enterprise Linux 8dotnet-apphost-pack-5.0-debuginfo0:5.0.2-2.el8_3
Red Hat Enterprise Linux 8dotnet-host0:5.0.2-2.el8_3
Red Hat Enterprise Linux 8dotnet-host-debuginfo0:5.0.2-2.el8_3
Red Hat Enterprise Linux 8dotnet-hostfxr-3.10:3.1.11-1.el8_3
Red Hat Enterprise Linux 8dotnet-hostfxr-3.1-debuginfo0:3.1.11-1.el8_3
Red Hat Enterprise Linux 8dotnet-hostfxr-5.00:5.0.2-2.el8_3
Red Hat Enterprise Linux 8dotnet-hostfxr-5.0-debuginfo0:5.0.2-2.el8_3
Red Hat Enterprise Linux 8dotnet-runtime-3.10:3.1.11-1.el8_3
Red Hat Enterprise Linux 8dotnet-runtime-3.1-debuginfo0:3.1.11-1.el8_3
Red Hat Enterprise Linux 8dotnet-runtime-5.00:5.0.2-2.el8_3
Red Hat Enterprise Linux 8dotnet-runtime-5.0-debuginfo0:5.0.2-2.el8_3
Red Hat Enterprise Linux 8dotnet-sdk-3.10:3.1.111-1.el8_3
Red Hat Enterprise Linux 8dotnet-sdk-3.1-debuginfo0:3.1.111-1.el8_3
Red Hat Enterprise Linux 8dotnet-sdk-5.00:5.0.102-2.el8_3
Red Hat Enterprise Linux 8dotnet-sdk-5.0-debuginfo0:5.0.102-2.el8_3
Red Hat Enterprise Linux 8dotnet-targeting-pack-3.10:3.1.11-1.el8_3
Red Hat Enterprise Linux 8dotnet-targeting-pack-5.00:5.0.2-2.el8_3
Red Hat Enterprise Linux 8dotnet-templates-3.10:3.1.111-1.el8_3
Red Hat Enterprise Linux 8dotnet-templates-5.00:5.0.102-2.el8_3
Red Hat Enterprise Linux 8dotnet3.10:3.1.111-1.el8_3
Red Hat Enterprise Linux 8dotnet3.1-debuginfo0:3.1.111-1.el8_3
Red Hat Enterprise Linux 8dotnet3.1-debugsource0:3.1.111-1.el8_3
Red Hat Enterprise Linux 8dotnet5.00:5.0.102-2.el8_3
Red Hat Enterprise Linux 8dotnet5.0-debuginfo0:5.0.102-2.el8_3
Red Hat Enterprise Linux 8dotnet5.0-debugsource0:5.0.102-2.el8_3
Red Hat Enterprise Linux 8netstandard-targeting-pack-2.10:5.0.102-2.el8_3
Red Hat rhel dotnet 3.1rh-dotnet31-aspnetcore-runtime-3.10:3.1.11-1.el7_9
Red Hat rhel dotnet 3.1rh-dotnet31-aspnetcore-targeting-pack-3.10:3.1.11-1.el7_9
Red Hat rhel dotnet 3.1rh-dotnet31-dotnet0:3.1.111-1.el7_9
Red Hat rhel dotnet 3.1rh-dotnet31-dotnet-apphost-pack-3.10:3.1.11-1.el7_9
Red Hat rhel dotnet 3.1rh-dotnet31-dotnet-debuginfo0:3.1.111-1.el7_9
Red Hat rhel dotnet 3.1rh-dotnet31-dotnet-host0:3.1.11-1.el7_9
Red Hat rhel dotnet 3.1rh-dotnet31-dotnet-hostfxr-3.10:3.1.11-1.el7_9
Red Hat rhel dotnet 3.1rh-dotnet31-dotnet-runtime-3.10:3.1.11-1.el7_9
Red Hat rhel dotnet 3.1rh-dotnet31-dotnet-sdk-3.10:3.1.111-1.el7_9
Red Hat rhel dotnet 3.1rh-dotnet31-dotnet-targeting-pack-3.10:3.1.11-1.el7_9
Red Hat rhel dotnet 3.1rh-dotnet31-dotnet-templates-3.10:3.1.111-1.el7_9
Red Hat rhel dotnet 3.1rh-dotnet31-netstandard-targeting-pack-2.10:3.1.111-1.el7_9
Red Hat rhel dotnet 5.0rh-dotnet50-aspnetcore-runtime-5.00:5.0.2-1.el7_9
Red Hat rhel dotnet 5.0rh-dotnet50-aspnetcore-targeting-pack-5.00:5.0.2-1.el7_9
Red Hat rhel dotnet 5.0rh-dotnet50-dotnet0:5.0.102-1.el7_9
Red Hat rhel dotnet 5.0rh-dotnet50-dotnet-apphost-pack-5.00:5.0.2-1.el7_9
Red Hat rhel dotnet 5.0rh-dotnet50-dotnet-debuginfo0:5.0.102-1.el7_9
Red Hat rhel dotnet 5.0rh-dotnet50-dotnet-host0:5.0.2-1.el7_9
Red Hat rhel dotnet 5.0rh-dotnet50-dotnet-hostfxr-5.00:5.0.2-1.el7_9
Red Hat rhel dotnet 5.0rh-dotnet50-dotnet-runtime-5.00:5.0.2-1.el7_9
Red Hat rhel dotnet 5.0rh-dotnet50-dotnet-sdk-5.00:5.0.102-1.el7_9
Red Hat rhel dotnet 5.0rh-dotnet50-dotnet-targeting-pack-5.00:5.0.2-1.el7_9
Red Hat rhel dotnet 5.0rh-dotnet50-dotnet-templates-5.00:5.0.102-1.el7_9
Red Hat rhel dotnet 5.0rh-dotnet50-netstandard-targeting-pack-2.10:5.0.102-1.el7_9