CVE-2018-8409

Name of the Vulnerable Software and Affected Versions .NET Core versions 2.1 ASP.NET Core versions 2.1 System.IO.Pipelines (affected versions not specified)

Description A denial of service issue exists due to improper handling of requests by System.IO.Pipelines. This can be exploited by a remote attacker using a specially crafted request to cause a denial of service.

Recommendations For .NET Core version 2.1, update to a version that includes the fix for this issue. For ASP.NET Core version 2.1, update to a version that includes the fix for this issue. For System.IO.Pipelines, at the moment, there is no information about a newer version that contains a fix for this vulnerability.