A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade dotnet-host-fxr-2.1-debuginfoUpgrade dotnet-runtime-2.1Upgrade dotnet-sdk-2.1.5xxUpgrade dotnet-sdk-2.1.5xx-debuginfoUpgrade dotnet-debuginfoUpgrade dotnet-runtime-2.1-debuginfoUpgrade dotnet-sdk-2.1Upgrade dotnet-host-fxr-2.1Upgrade dotnet-debugsourceUpgrade dotnet-hostUpgrade dotnetUpgrade dotnet-host-debuginfo | Aug 28, 2019 | May 16, 2019 |
| Msft | — | Apply update KB4495618 for Microsoft .NET Framework 4.82019-05 Security Only Update for .NET Framework 3.5.1 for Windows 7 (KB4495612)2019-05 Security Only Update for .NET Framework 3.5 for Windows 8.1 and Server 2012 R2 for x64 (KB4495615)2019-05 Security Only Update for .NET Framework 2.0 on Windows Server 2008 SP2 for Itanium-based Systems (KB4495609)Apply update KB4495616 for Microsoft .NET Framework 4.82019-05 Security Only Update for .NET Framework 4.8 for Windows Server 2012 for x64 (KB4495623)Apply update KB4494440 for Microsoft .NET Framework 3.5Apply update KB4499179 for Microsoft .NET Framework 3.52019-05 Security Only Update for .NET Framework 4.5.2 for Windows 7 and Server 2008 R2 for x64 (KB4495593)2019-05 Security Only Update for .NET Framework 4.5.2 for Windows Server 2012 for x64 (KB4495591)2019-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 for x64 (KB4495584)Apply update KB4495590 for Microsoft .NET Framework 4.7.22019-05 Security Only Update for .NET Framework 4.6 for Windows Server 2008 SP2 (KB4495587)2019-05 Security Only Update for .NET Framework 4.5.2 for Windows 7 (KB4495593)2019-05 Security Only Update for .NET Framework 2.0, 3.0 for Windows Server 2008 SP2 (KB4495609)2019-05 Security Only Update for .NET Framework 4.5.2 for Windows Server 2008 SP2 for x64 (KB4495593)2019-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 and Server 2008 R2 for x64 (KB4495587)2019-05 Security Only Update for .NET Framework 4.5.2 for Windows Server 2008 SP2 (KB4495593)2019-05 Security Only Update for .NET Framework 2.0, 3.0 for Windows Server 2008 SP2 for x64 (KB4495609)2019-05 Security Only Update for .NET Framework 4.8 for Windows 8.1 and Server 2012 R2 for x64 (KB4495625)2019-05 Security Only Update for .NET Framework 3.5.1 for Windows Server 2008 R2 for Itanium-based Systems (KB4495612)Apply update KB4495613 for Microsoft .NET Framework 4.8Apply update KB4495590 for Microsoft .NET Framework 3.52019-05 Security Only Update for .NET Framework 4.8 for Windows 7 (KB4495627)2019-05 Security Only Update for .NET Framework 4.6 for Windows Server 2008 SP2 for x64 (KB4495587)Apply update KB4495620 for Microsoft .NET Framework 3.52019-05 Security Only Update for .NET Framework 3.5 for Windows Embedded 8 Standard (KB4495607)2019-05 Security Only Update for .NET Framework 3.5 for Windows Server 2012 for x64 (KB4495607)2019-05 Security Only Update for .NET Framework 4.8 for Windows Embedded 8 Standard (KB4495623)2019-05 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 1903 RTM for x64 (KB4495620)Apply update KB4495610 for Microsoft .NET Framework 4.8Apply update KB4494440 for Microsoft .NET Framework 4.6.2\4.7\4.7.1\4.7.22019-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 (KB4495587)Apply update KB4499167 for Microsoft .NET Framework 4.7.2Apply update KB4495611 for Microsoft .NET Framework 4.82019-05 Security Only Update for .NET Framework 4.5.2 for Windows Embedded 8 Standard for x64 (KB4495591)2019-05 Security Only Update for .NET Framework 3.5 for Windows Embedded 8 Standard for x64 (KB4495607)2019-05 Security Only Update for .NET Framework 4.5.2 for Windows 8.1 and Server 2012 R2 for x64 (KB4495589)2019-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 and Server 2012 R2 for x64 (KB4495586)2019-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard for x64 (KB4495584)Apply update KB4499181 for Microsoft .NET Framework 3.52019-05 Security Only Update for .NET Framework 4.8 for Windows 7 and Server 2008 R2 for x64 (KB4495627)2019-05 Security Only Update for .NET Framework 4.8 for Windows 8.1 (KB4495625)2019-05 Security Only Update for .NET Framework 3.5 for Windows 8.1 (KB4495615)2019-05 Security Only Update for .NET Framework 4.8 for Windows Embedded 8 Standard for x64 (KB4495623)2019-05 Security Only Update for .NET Framework 4.5.2 for Windows Embedded 8 Standard (KB4495591)2019-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 (KB4495586)2019-05 Security Only Update for .NET Framework 3.5.1 for Windows 7 and Server 2008 R2 for x64 (KB4495612)2019-05 Security Only Update for .NET Framework 4.5.2 for Windows 8.1 (KB4495589)2019-05 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard (KB4495584)Apply update KB4499154 for Microsoft .NET Framework 3.5 | May 14, 2019 | May 14, 2019 |
| Oracle_linux | — | Upgrade dotnet-runtime-2.1Upgrade dotnet-sdk-2.1Upgrade dotnet-hostUpgrade dotnet-sdk-2.1.5xxUpgrade dotnet-host-fxr-2.1Upgrade dotnet | Jul 22, 2024 | May 14, 2019 |
| Redhat_linux | — | Upgrade dotnetUpgrade dotnet-runtime-2.1-debuginfoUpgrade dotnet-hostUpgrade dotnet-sdk-2.1.5xx-debuginfoUpgrade dotnet-host-fxr-2.1Upgrade dotnet-host-fxr-2.1-debuginfoUpgrade dotnet-host-debuginfoUpgrade dotnet-debuginfoUpgrade dotnet-sdk-2.1.5xxUpgrade dotnet-debugsourceUpgrade dotnet-sdk-2.1Upgrade dotnet-runtime-2.1 | May 23, 2019 | May 16, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub