CVE-2019-0548
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka ...
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.
- Record
CVE-2019-0548- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-19
- Updated
- 2026-11-02
CVE List No score
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.
- Record
CVE-2019-0548- Updated
- 2026-11-02
EUVDEUVD-2019-1318 No score
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.
- Record
EUVD-2019-1318- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9pfr-cc3p-p98q
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka ...
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.
- Record
GHSA-9pfr-cc3p-p98q- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.
- Record
CVE-2019-0548- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2019:0040
Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security update
- Record
RHSA-2019:0040- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rh-dotnet21Red Hat:rhel_dotnet:2.1::el7 From an advisory covering 3 CVEs |
before 0:2.1-6.el7 | 0:2.1-6.el7 |
rh-dotnet21-dotnetRed Hat:rhel_dotnet:2.1::el7 From an advisory covering 3 CVEs |
before 0:2.1.503-1.el7 | 0:2.1.503-1.el7 |
rh-dotnet21-dotnet-debuginfoRed Hat:rhel_dotnet:2.1::el7 From an advisory covering 3 CVEs |
before 0:2.1.503-1.el7 | 0:2.1.503-1.el7 |
rh-dotnet21-dotnet-hostRed Hat:rhel_dotnet:2.1::el7 From an advisory covering 3 CVEs |
before 0:2.1.7-1.el7 | 0:2.1.7-1.el7 |
rh-dotnet21-dotnet-runtime-2.1Red Hat:rhel_dotnet:2.1::el7 From an advisory covering 3 CVEs |
before 0:2.1.7-1.el7 | 0:2.1.7-1.el7 |
rh-dotnet21-dotnet-sdk-2.1Red Hat:rhel_dotnet:2.1::el7 From an advisory covering 3 CVEs |
before 0:2.1.503-1.el7 | 0:2.1.503-1.el7 |
rh-dotnet21-dotnet-sdk-2.1.5xxRed Hat:rhel_dotnet:2.1::el7 From an advisory covering 3 CVEs |
before 0:2.1.503-1.el7 | 0:2.1.503-1.el7 |
rh-dotnet21-runtimeRed Hat:rhel_dotnet:2.1::el7 From an advisory covering 3 CVEs |
before 0:2.1-6.el7 | 0:2.1-6.el7 |
rh-dotnet22Red Hat:rhel_dotnet:2.2::el7 From an advisory covering 3 CVEs |
before 0:2.2-2.el7 | 0:2.2-2.el7 |
rh-dotnet22-dotnetRed Hat:rhel_dotnet:2.2::el7 From an advisory covering 3 CVEs |
before 0:2.2.102-1.el7 | 0:2.2.102-1.el7 |
Show 7 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rh-dotnet22-dotnet-debuginfoRed Hat:rhel_dotnet:2.2::el7 From an advisory covering 3 CVEs |
before 0:2.2.102-1.el7 | 0:2.2.102-1.el7 |
rh-dotnet22-dotnet-hostRed Hat:rhel_dotnet:2.2::el7 From an advisory covering 3 CVEs |
before 0:2.2.1-1.el7 | 0:2.2.1-1.el7 |
rh-dotnet22-dotnet-host-fxr-2.2Red Hat:rhel_dotnet:2.2::el7 From an advisory covering 3 CVEs |
before 0:2.2.1-1.el7 | 0:2.2.1-1.el7 |
rh-dotnet22-dotnet-runtime-2.2Red Hat:rhel_dotnet:2.2::el7 From an advisory covering 3 CVEs |
before 0:2.2.1-1.el7 | 0:2.2.1-1.el7 |
rh-dotnet22-dotnet-sdk-2.2Red Hat:rhel_dotnet:2.2::el7 From an advisory covering 3 CVEs |
before 0:2.2.102-1.el7 | 0:2.2.102-1.el7 |
rh-dotnet22-dotnet-sdk-2.2.1xxRed Hat:rhel_dotnet:2.2::el7 From an advisory covering 3 CVEs |
before 0:2.2.102-1.el7 | 0:2.2.102-1.el7 |
rh-dotnet22-runtimeRed Hat:rhel_dotnet:2.2::el7 From an advisory covering 3 CVEs |
before 0:2.2-2.el7 | 0:2.2-2.el7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-0548 is a high vulnerability (CVSS 7.5) in Microsoft Asp.net Core, published January 8, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.21%, the 94th percentile. No source names a fixed version.
References
securityfocus.com/bid/106410
access.redhat.com/errata/RHSA-2019:0040
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0548
nvd.nist.gov/vuln/detail/CVE-2019-0548
github.com/advisories/GHSA-9pfr-cc3p-p98q
Show 14 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1660632
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0040.json
cve.org/CVERecord?id=CVE-2019-0545