.NET Core vulnerabilities

.NET Core versions 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests.

Versions .NET Core 1.0, 1.1, and 2.0 have a vulnerability that allows an unauthenticated attacker to remotely trigger a denial of service attack against a .NET Core web application by improperly parsing certificate data.

Denial of service vulnerability in .NET Core and .NET Framework due to improper handling of web requests. A remote unauthenticated attacker could cause a denial of service by sending specially crafted requests to the application.

A type confusion vulnerability in .NET Core allows an unauthorized attacker to cause a denial of service over a network.

A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system.