CVE-2018-8409
NET: Resource loop in ReadAsync when it is being cancelled while producer allocates memory using GetMemory
A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.
CVSS 3.1 · 7.5 High
EPSS 6.6%
KEV · Not listed
Vendors
Products