4 reportsPriority Low
The ASP.NET Core resource allocation vulnerability
A vulnerability in ASP.NET Core could allow attackers to cause denial of service, with multiple CVEs reported and ongoing confirmation required for affected systems.
First report Latest
What is going on
- A vulnerability in ASP.NET Core was reported that allows unauthorised attackers to deny service by allocating resources without limits or throttling.
- Two separate CVEs were assigned to the same issue, with updates to security updates links and product listings published within minutes.
- No details were provided about a data breach incident involving a FSI chief, but organisations are advised to check for exposure.
- A separate vulnerability named GhostMap was reported for Android, which can trigger persistent boot loops without app permissions.
- What to watch: Confirmation of which specific versions of ASP.NET Core are affected and the extent of potential exposure across organisations.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority LowType VulnerabilityLead report
GhostMap Android Vulnerability Can Trigger Persistent Boot Loops Without App Permissions
- Priority LowType Incident
FSI Chief Apologizes for Data Breach, Leaves After One-Minute Statement Without Details
- Priority LowType Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network
- Priority LowType Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network