CVE-2019-1083

HIGH

Microsoft .net Framework - Denial of Service

Title source: rule
STIX 2.1

Description

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of Service Vulnerability'.

Exploits (1)

nomisec WORKING POC 3 stars
by stevenseeley · poc
https://github.com/stevenseeley/HowCVE-2019-1083Works

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.1056
EPSS Percentile 93.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-19
Status published
Products (12)
microsoft/.net_framework 2.0 sp2
microsoft/.net_framework 3.0 sp2
microsoft/.net_framework 3.5
microsoft/.net_framework 4.7.2
microsoft/.net_framework 4.8
microsoft/.net_framework 3.5.1
microsoft/.net_framework 4.5.2
microsoft/.net_framework 4.6
microsoft/.net_framework 4.6.1
microsoft/.net_framework 4.6.2
... and 2 more
Published Jul 15, 2019
Tracked Since Feb 18, 2026