Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2021-31957

Good to know:

icon

Date: June 8, 2021

ASP.NET Core Denial of Service Vulnerability

Language: C#

Severity Score

Related Resources (14)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMAO4NG2OQ4PCXUQWMNSCMYWLIJJY6UY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VMAO4NG2OQ4PCXUQWMNSCMYWLIJJY6UY
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PMHWHRRYDHKM6BIINW5V7OCSW4SDWB4W
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4PRVVLXXQEF4SEJOBV3VRJHGX7YHY2CG
https://github.com/dotnet/aspnetcore/security/advisories/GHSA-mcwm-2wmc-6hv4
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4PRVVLXXQEF4SEJOBV3VRJHGX7YHY2CG/
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31957
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMHWHRRYDHKM6BIINW5V7OCSW4SDWB4W/
https://access.redhat.com/security/cve/CVE-2021-31957
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CVCDYIP4A6DDRT7G6P3ZW6PKNK2DNWJ2
https://github.com/dotnet/aspnetcore
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVCDYIP4A6DDRT7G6P3ZW6PKNK2DNWJ2/
https://nvd.nist.gov/vuln/detail/CVE-2021-31957
https://www.mend.io/vulnerability-database/CVE-2021-31957

Severity Score

Weakness Type (CWE)

Insufficient Information

NVD-CWE-noinfo

Top Fix

icon

Upgrade Version

Upgrade to version aspnetcore-runtime-3.1 - 3.1.16-1;aspnetcore-runtime-5.0 - 5.0.7-1;dotnet-templates-3.1 - 3.1.116-1;dotnet-templates-5.0 - 5.0.204-1;dotnet-apphost-pack-5.0-debuginfo - 5.0.7-1;dotnet-hostfxr-5.0-debuginfo - 5.0.7-1;dotnet-runtime-5.0-debuginfo - 5.0.7-1;dotnet-host-debuginfo - 5.0.7-1;dotnet-sdk-5.0-debuginfo - 5.0.204-1;dotnet-hostfxr-3.1 - 3.1.16-1;dotnet-hostfxr-5.0 - 5.0.7-1;dotnet5.0-debugsource - 5.0.204-1;dotnet3.1 - 3.1.116-1;dotnet5.0 - 5.0.204-1;aspnetcore-targeting-pack-3.1 - 3.1.16-1;aspnetcore-targeting-pack-5.0 - 5.0.7-1;dotnet-apphost-pack-3.1 - 3.1.16-1;dotnet-apphost-pack-5.0 - 5.0.7-1;dotnet-apphost-pack-3.1-debuginfo - 3.1.16-1;dotnet-runtime-3.1 - 3.1.16-1;dotnet-runtime-5.0 - 5.0.7-1;dotnet5.0-debuginfo - 5.0.204-1;dotnet-hostfxr-3.1-debuginfo - 3.1.16-1;dotnet-runtime-3.1-debuginfo - 3.1.16-1;netstandard-targeting-pack-2.1 - 5.0.204-1;dotnet-sdk-3.1-debuginfo - 3.1.116-1;dotnet-sdk-3.1 - 3.1.116-1;dotnet-sdk-5.0 - 5.0.204-1;dotnet - 5.0.204-1;dotnet-host - 5.0.7-1;dotnet-targeting-pack-3.1 - 3.1.16-1;dotnet-targeting-pack-5.0 - 5.0.7-1;dotnet3.1-debugsource - 3.1.116-1;dotnet3.1-debuginfo - 3.1.116-1

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us