CVE-2020-1108: 
vulnerability analysis and mitigation

A denial of service vulnerability (CVE-2020-1108) exists when .NET Core or .NET Framework improperly handles web requests. The vulnerability was disclosed in May 2020 and affects multiple versions of Microsoft .NET Framework and .NET Core. This vulnerability impacts various versions of Windows operating systems and related Microsoft products (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The vulnerability can be exploited remotely without requiring authentication or user interaction (NVD).

A successful exploitation of this vulnerability could allow an attacker to cause a denial of service against a .NET Framework web application. The attack can be executed remotely without requiring authentication, potentially disrupting the availability of the affected web application (Microsoft Support).

The vulnerability can be exploited by issuing specially crafted requests to the .NET Framework application. An attacker can execute the exploit remotely without requiring authentication or user interaction (Microsoft Support).

Microsoft has released security updates to address this vulnerability. The update corrects how the .NET Framework web application handles web requests. Users are advised to apply the appropriate security updates for their specific version of .NET Framework or .NET Core (Microsoft Support).