CVE-2019-0981High

Microsoft security update for CVE-2019-0981

Published
May 14, 2019
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2019-0981 →

📋 Microsoft's advisory

EchelonGraph does not copy Microsoft's advisory page: its FAQ and remediation text are not shown here. Read the advisory on https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0981. This page also shows what EchelonGraph holds for CVE-2019-0981, with the description from its CVE record, which the CVE Numbering Authority that assigned the CVE wrote: for a CVE Microsoft assigned, often in the words of Microsoft's own advisory.

🎯 Affected products120

  • .NET Core 1.0
  • .NET Core 1.1
  • .NET Core 2.1
  • .NET Core 2.2
  • Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
  • Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2
  • Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
  • Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
  • Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2
  • Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
  • Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems
  • Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems
  • Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems
  • Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for x64-based Systems
  • Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for 32-bit Systems
  • Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for x64-based Systems
  • Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for 32-bit Systems
  • Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for x64-based Systems
  • Microsoft .NET Framework 3.5 on Windows 10 Version 1809 for 32-bit Systems
  • Microsoft .NET Framework 3.5 on Windows 10 Version 1809 for x64-based Systems
  • Microsoft .NET Framework 3.5 on Windows 10 Version 1903 for 32-bit Systems
  • Microsoft .NET Framework 3.5 on Windows 10 Version 1903 for x64-based Systems
  • Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems
  • Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems
  • Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems
  • Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems
  • Microsoft .NET Framework 3.5 on Windows Server 2012
  • Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation)
  • +90 more not shown

✅ Updates Microsoft lists: 38 KB articles and 5 other updates

43 rows: one per KB article or update, update type and fixed build. Their details are on Microsoft's advisory.

KB articleUpdateFixed build
—Security Update—
—Security Update—
—Security Update—
—Security Update—
—Security Update—
KB4499167Security Update—
KB4495590Security Update—
KB4495588Monthly Rollup—
KB4495587Security Only—
KB4495585Monthly Rollup—
KB4495586Security Only—
KB4495582Monthly Rollup—
KB4495584Security Only—
KB4494440Security Update—
KB4499181Security Update—
KB4499179Security Update—
KB4495611Security Update—
KB4495616Security Update—
KB4495618Security Update—
KB4495613Security Update—
KB4495620Security Update—
KB4495610Security Update—
KB4495626Monthly Rollup—
KB4495627Security Only—
KB4495624Monthly Rollup—
KB4495622Monthly Rollup—
KB4495623Security Only—
KB4499154Security Update—
KB4495604Monthly Rollup—
KB4495609Security Only—
KB4495608Monthly Rollup—
KB4495615Security Only—
KB4495606Monthly Rollup—
KB4495612Security Only—
KB4495592Monthly Rollup—
KB4495589Security Only—
KB4495594Monthly Rollup—
KB4495591Security Only—
KB4495625Security Only—
KB4495602Monthly Rollup—

+3 more rows listed in Microsoft's advisory

🧭 EchelonGraph on CVE-2019-0981

EchelonGraph score
7.5 HIGH
CISA KEV
Not listed
Fix status
A fix is available — apply it.

Description from the CVE record (CVE.org), as published by its numbering authority

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.

Published by Microsoft Corporation, the CVE Numbering Authority that assigned CVE-2019-0981, in its CVE record at CVE.org; reused under the CVE Program's Terms of Use (its licence and MITRE's copyright notice are in our Terms of Service).

🔗 References (49)