CVE-2021-31957
Description
ASP.NET Core Denial of Service Vulnerability
Risk Information
Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
5.126
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2021-31957 are fixed in Update for AspNet Core (x64) (3.1.16) | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Update for AspNet Core (x86) (3.1.16) | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Update for AspNet Core (x64) (5.0.7) | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Update for AspNet Core (x86) (5.0.7) | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Microsoft Visual Studio Community 2019 16.10.1 | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Microsoft Visual Studio Community 2019 16.9.7 | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Microsoft Visual Studio Community 2019 16.7.16 | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Microsoft Visual Studio Community 2019 16.4.23 | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Microsoft Visual Studio Enterprise 2019 16.10.1 | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Microsoft Visual Studio Enterprise 2019 16.9.7 | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Microsoft Visual Studio Enterprise 2019 16.7.16 | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Microsoft Visual Studio Enterprise 2019 16.4.23 | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Microsoft Visual Studio Professional 2019 16.10.1 | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Microsoft Visual Studio Professional 2019 16.9.7 | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Microsoft Visual Studio Professional 2019 16.7.16 | Windows |
| Vulnerabilities CVE-2021-31957 are fixed in Microsoft Visual Studio Professional 2019 16.4.23 | Windows |
| (RHSA-2021:2352) .NET Core 3.1 security and bugfix update aspnetcore-runtime-3.1-3.1.16-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2352) .NET Core 3.1 security and bugfix update aspnetcore-targeting-pack-3.1-3.1.16-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2352) .NET Core 3.1 security and bugfix update dotnet-apphost-pack-3.1-3.1.16-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2352) .NET Core 3.1 security and bugfix update dotnet-hostfxr-3.1-3.1.16-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2352) .NET Core 3.1 security and bugfix update dotnet-runtime-3.1-3.1.16-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2352) .NET Core 3.1 security and bugfix update dotnet-sdk-3.1-3.1.116-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2352) .NET Core 3.1 security and bugfix update dotnet-targeting-pack-3.1-3.1.16-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2352) .NET Core 3.1 security and bugfix update dotnet-templates-3.1-3.1.116-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2352) .NET Core 3.1 security and bugfix update dotnet3.1-debugsource-3.1.116-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2353) .NET 5.0 security and bugfix update aspnetcore-runtime-5.0-5.0.7-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2353) .NET 5.0 security and bugfix update aspnetcore-targeting-pack-5.0-5.0.7-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2353) .NET 5.0 security and bugfix update dotnet-5.0.204-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2353) .NET 5.0 security and bugfix update dotnet-apphost-pack-5.0-5.0.7-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2353) .NET 5.0 security and bugfix update dotnet-host-5.0.7-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2353) .NET 5.0 security and bugfix update dotnet-hostfxr-5.0-5.0.7-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2353) .NET 5.0 security and bugfix update dotnet-runtime-5.0-5.0.7-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2353) .NET 5.0 security and bugfix update dotnet-sdk-5.0-5.0.204-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2353) .NET 5.0 security and bugfix update dotnet-targeting-pack-5.0-5.0.7-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2353) .NET 5.0 security and bugfix update dotnet-templates-5.0-5.0.204-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2353) .NET 5.0 security and bugfix update dotnet5.0-debugsource-5.0.204-1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:2353) .NET 5.0 security and bugfix update netstandard-targeting-pack-2.1-5.0.204-1.el8_4.x86_64.rpm | Linux |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-108836 | Update for AspNet Core (x64) (3.1.16) |
| PATCH-108837 | Update for AspNet Core (x86) (3.1.16) |
| PATCH-108834 | Update for AspNet Core (x64) (5.0.7) |
| PATCH-108835 | Update for AspNet Core (x86) (5.0.7) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234