Microsoft ASP.NET Core Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Microsoft ASP.NET Core versions 8.0.25, 9.0.14, and 10.0.4. This vulnerability arises from the allocation of resources without proper limits or throttling, allowing an unauthorized attacker to disrupt service over a network.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing a significant disruption in service availability.

Remediation

Users can download the security update for ASP.NET Core 10.0 from the .NET download site. For ASP.NET Core 9.0 and 8.0, similar security updates are available on their respective download pages. After applying the update, users should verify that their application is running the patched version.