Denial of Service (DoS)
Affecting microsoft.aspnetcore.server.kestrel.core package, versions [2.1.0,2.1.7)
microsoft.aspnetcore.server.kestrel.core is a core components of ASP.NET Core Kestrel cross-platform web server.
Affected versions of this package are vulnerable to Denial of Service (DoS). An unauthenticated attacker can cause a denial of service remotely, by issuing specially crafted requests to the .NET Core application. This is caused by an improper handling of a web request in ASP.NET Core. This CVE ID is unique from CVE-2019-0548.
microsoft.aspnetcore.server.kestrel.core to version 2.1.7 or higher.
Do your applications use this vulnerable package?