CVE-2018-8269
High · 7.5CVSS
7.5
EPSS
26.8%
Published
Sep 13, 2018
CISA due date
—
The record
A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| NuGet | Microsoft.AspNetCore.All | 2.1.0 | 2.1.13 |
| NuGet | Microsoft.AspNetCore.All | 2.2.0 | 2.2.7 |
| NuGet | Microsoft.AspNetCore.DataProtection.AzureStorage | 2.1.0 | 2.1.13 |
| NuGet | Microsoft.AspNetCore.DataProtection.AzureStorage | 2.2.0 | 2.2.7 |
| NuGet | Microsoft.Data.OData | 0 | 5.8.4 |
| nuget | Microsoft.AspNetCore.All | 2.1.0 | 2.1.13 |
| nuget | Microsoft.AspNetCore.All | 2.2.0 | 2.2.7 |
| nuget | Microsoft.AspNetCore.DataProtection.AzureStorage | 2.1.0 | 2.1.2 |
| nuget | Microsoft.AspNetCore.DataProtection.AzureStorage | 2.2.0 | No fix |