{"action":"Upgrade Microsoft.AspNetCore.Server.HttpSys to 2.0.2 or later.","affected":[{"fixed":"2.0.2","introduced":"2.0.0"}],"component":"Microsoft.AspNetCore.Server.HttpSys","cve_ids":["CVE-2017-11883"],"ecosystem":"NuGet","epss":0.08526,"exploited":false,"fixed_versions":["2.0.2"],"ghsa_id":"GHSA-f9jc-rrm2-pmfg","id":"tcs_01M5N8M8VGDB0ZYX84MERVH142","modified_at":"2024-12-05T05:43:34.145995Z","published_at":"2022-05-13T01:42:35Z","references":["https://osv.dev/vulnerability/GHSA-f9jc-rrm2-pmfg","https://nvd.nist.gov/vuln/detail/CVE-2017-11883","https://github.com/aspnet/Announcements/issues/278","https://github.com/github/advisory-database/issues/302","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11883"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-f9jc-rrm2-pmfg#NuGet/Microsoft.AspNetCore.Server.HttpSys","url":"https://osv.dev/vulnerability/GHSA-f9jc-rrm2-pmfg"}],"summary":"Denial of service in ASP.NET Core"}