CVE-2020-1597: 
vulnerability analysis and mitigation

A denial of service vulnerability (CVE-2020-1597) exists in ASP.NET Core when it improperly handles web requests. The vulnerability was discovered in 2019 and affects ASP.NET Core web applications. This security flaw can be exploited remotely without requiring authentication (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The vulnerability allows remote attackers to cause a denial of service condition by sending specially crafted requests to the ASP.NET Core application (NVD).

When successfully exploited, this vulnerability could cause a denial of service condition against an ASP.NET Core web application, potentially making the service unavailable to legitimate users (NVD).

The vulnerability can be exploited remotely by an unauthenticated attacker by issuing specially crafted requests to the ASP.NET Core application. No user interaction is required for exploitation (NVD).

The vulnerability has been addressed through updates that correct how the ASP.NET Core web application handles web requests. Updates are available through .NET Core Runtime 3.1.7 and SDK 3.1.107 (Fedora Update).