A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application. The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade netstandard-targeting-pack-2.1Upgrade dotnet-apphost-pack-3.1-debuginfoUpgrade dotnet-host-fxr-2.1Upgrade dotnet3.1-debuginfoUpgrade dotnet-runtime-2.1Upgrade aspnetcore-runtime-3.1Upgrade dotnetUpgrade dotnet-sdk-2.1.5xxUpgrade dotnet-runtime-2.1-debuginfoUpgrade dotnet-sdk-3.1Upgrade dotnet-hostUpgrade dotnet-templates-3.1Upgrade dotnet-debuginfoUpgrade dotnet-runtime-3.1Upgrade aspnetcore-targeting-pack-3.1Upgrade dotnet-hostfxr-3.1Upgrade dotnet3.1-debugsourceUpgrade dotnet-runtime-3.1-debuginfoUpgrade dotnet-host-debuginfoUpgrade dotnet-hostfxr-3.1-debuginfoUpgrade dotnet-sdk-2.1.5xx-debuginfoUpgrade dotnet-sdk-3.1-debuginfoUpgrade dotnet-debugsourceUpgrade dotnet-host-fxr-2.1-debuginfoUpgrade dotnet-apphost-pack-3.1Upgrade dotnet-targeting-pack-3.1Upgrade dotnet-sdk-2.1 | May 14, 2020 | May 13, 2020 |
| Microsoft Visual_studio | — | Update Microsoft Visual Studio 2017 to the latest version in the LTSC 15.9 version stream, or upgrade to a newer supported version of Visual Studio 2017.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.0 version stream, or upgrade to a newer supported version of Visual Studio 2019.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.4 version stream, or upgrade to a newer supported version of Visual Studio 2019. | Mar 2, 2026 | May 12, 2020 |
| Msft | — | 2020-05 Security Only Update for .NET Framework 4.6 for Windows Server 2008 SP2 for x64 (KB4552951)Apply update KB4552931 for Microsoft .NET Framework 3.5\4.82020-05 Security Only Update for .NET Framework 4.8 for Windows Embedded 8 Standard for x64 (KB4552961)2020-05 Security Only Update for .NET Framework 4.8 for Windows 8.1 (KB4552962)2020-05 Security Only Update for .NET Framework 4.8 for Windows Embedded 8 Standard (KB4552961)2020-05 Security Only Update for .NET Framework 4.5.2 for Windows Embedded Standard 7 (KB4552952)2020-05 Security Only Update for .NET Framework 4.5.2 for Windows 7 (KB4552952)2020-05 Security Only Update for .NET Framework 4.5.2 for Windows Server 2008 R2 for x64 (KB4552952)Apply update KB4552926 for Microsoft .NET Framework 4.82020-05 Security Only Update for .NET Framework 4.5.2 for Windows 8.1 and Server 2012 R2 for x64 (KB4552967)Apply update KB4556807 for Microsoft .NET Framework 3.5\4.7.22020-05 Security Only Update for .NET Framework 4.5.2 for Windows Server 2012 for x64 (KB4552968)2020-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 and Server 2012 R2 for x64 (KB4552959)2020-05 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server, version 1909 for x64 (KB4552931)2020-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 for x64 (KB4552958)2020-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded Standard 7 for x64 (KB4552951)2020-05 Security Only Update for .NET Framework 4.5.2 for Windows Server 2008 SP2 for x64 (KB4552952)2020-05 Security Only Update for .NET Framework 4.5.2 for Windows 7 for x64 (KB4552952)2020-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 (KB4552959)Apply update KB4556813 for Microsoft .NET Framework 3.5\4.6.2\4.7\4.7.1\4.7.22020-05 Security Only Update for .NET Framework 4.6 for Windows Server 2008 SP2 (KB4552951)2020-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2008 R2 for x64 (KB4552951)Apply update KB4552929 for Microsoft .NET Framework 4.82020-05 Security Only Update for .NET Framework 4.5.2 for Windows Embedded 8 Standard for x64 (KB4552968)2020-05 Security Only Update for .NET Framework 4.8 for Windows 8.1 and Server 2012 R2 for x64 (KB4552962)Apply update KB4552924 for Microsoft .NET Framework 3.5\4.7.22020-05 Security Only Update for .NET Framework 4.5.2 for Windows Embedded 8 Standard (KB4552968)2020-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 for x64 (KB4552951)2020-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard (KB4552958)2020-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard for x64 (KB4552958)Apply update KB4556812 for Microsoft .NET Framework 3.5\4.7.1\4.7.22020-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 (KB4552951)Apply update KB4552930 for Microsoft .NET Framework 3.5\4.82020-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded Standard 7 (KB4552951)2020-05 Security Only Update for .NET Framework 4.5.2 for Windows Server 2008 SP2 (KB4552952)2020-05 Security Only Update for .NET Framework 4.5.2 for Windows 8.1 (KB4552967)2020-05 Security Only Update for .NET Framework 4.8 for Windows Server 2012 for x64 (KB4552961)2020-05 Security Only Update for .NET Framework 4.5.2 for Windows Embedded Standard 7 for x64 (KB4552952)Apply update KB4552928 for Microsoft .NET Framework 4.8Apply update KB4556826 for Microsoft .NET Framework 3.5\4.6\4.6.1\4.6.22020-05 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4556813) | May 12, 2020 | May 12, 2020 |
| Oracle_linux | — | Upgrade dotnet-targeting-pack-3.1Upgrade dotnet-sdk-2.1Upgrade dotnet-hostUpgrade dotnet-apphost-pack-3.1Upgrade dotnetUpgrade dotnet-sdk-3.1Upgrade dotnet-runtime-2.1Upgrade aspnetcore-runtime-3.1Upgrade aspnetcore-targeting-pack-3.1Upgrade netstandard-targeting-pack-2.1Upgrade dotnet-host-fxr-2.1Upgrade dotnet-sdk-2.1.5xxUpgrade dotnet-runtime-3.1Upgrade dotnet-hostfxr-3.1Upgrade dotnet-templates-3.1 | May 15, 2020 | May 12, 2020 |
| Redhat_linux | — | Upgrade dotnet-sdk-3.1Upgrade dotnet-runtime-2.1Upgrade dotnet-runtime-2.1-debuginfoUpgrade aspnetcore-runtime-3.1Upgrade dotnetUpgrade dotnet-sdk-2.1.5xxUpgrade aspnetcore-targeting-pack-3.1Upgrade dotnet-templates-3.1Upgrade netstandard-targeting-pack-2.1Upgrade dotnet-debuginfoUpgrade dotnet-host-fxr-2.1Upgrade dotnet-runtime-3.1Upgrade dotnet3.1-debuginfoUpgrade dotnet-hostfxr-3.1-debuginfoUpgrade dotnet-debugsourceUpgrade dotnet-sdk-2.1Upgrade dotnet-sdk-2.1.5xx-debuginfoUpgrade dotnet-host-debuginfoUpgrade dotnet-runtime-3.1-debuginfoUpgrade dotnet-apphost-pack-3.1-debuginfoUpgrade dotnet-hostUpgrade dotnet-apphost-pack-3.1Upgrade dotnet-hostfxr-3.1Upgrade dotnet-host-fxr-2.1-debuginfoUpgrade dotnet3.1-debugsourceUpgrade dotnet-targeting-pack-3.1Upgrade dotnet-sdk-3.1-debuginfo | May 14, 2020 | May 13, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub