High
Security advisory
A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-0980
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 07:01 UTC · Revision 1
Source evidence
A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.
osv:CVE-2019-0980
Complete source record
{
"id": "84e399d0bf724256154683aea9af526de6e10834634694ebc5d1c2665d26e2f3",
"url": "https://osv.dev/vulnerability/CVE-2019-0980",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-0980",
"summary": "A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.",
"evidence": "osv:CVE-2019-0980",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2019-0980",
"aliases": [
"CVE-2019-0980",
"GHSA-xhfc-gr8f-ffwc"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/dotnet/core",
"type": "GIT",
"events": [
{
"introduced": "6251598c0087239b392cccda68515cd8c71d7f3d"
},
{
"last_affected": "babd93cbba8eef59a323d66d2f9b63131b81408b"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:microsoft:.net_core:1.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.0"
},
{
"last_affected": "1.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:microsoft:.net_core:1.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.1"
},
{
"last_affected": "1.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:microsoft:.net_core:2.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.1"
},
{
"last_affected": "2.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:microsoft:.net_core:2.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.2"
},
{
"last_affected": "2.2"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"1.0",
"1.1",
"2.1",
"2.2",
"v2.2.0",
"v2.1.6",
"v2.2.0-preview3",
"v1.1.10",
"v1.0.13",
"v2.1.5",
"v2.1.4",
"v2.2.0-preview1",
"v2.1.3",
"v2.1.2",
"v2.0.9",
"v1.1.9",
"v1.0.12",
"v2.1.1",
"v2.1.0",
"v2.0.7-2",
"v2.1-rc1",
"v2.0.7",
"v1.1.8",
"v1.1.7",
"v1.0.11",
"v2.1-preview2",
"v2.0.6",
"v1.0.10",
"v2.1-preview1",
"v1.1.6",
"v1.0.9",
"v2.0.5",
"v2.0.4",
"v2.0.3",
"v1.1.5",
"v1.0.8",
"v1.1.4",
"v1.0.7",
"v2.0.0",
"v2.0.0-preview2",
"v2.0.0-preview1",
"v1.1.2",
"v1.0.5",
"v1.1.1",
"v1.0.4",
"v1.0.3",
"v1.1",
"v1.1.0-preview1",
"v1.0.2",
"v1.0.1",
"v1.1.0",
"v1.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-0980.json"
}
}
],
"modified": "2026-10-24T10:30:47.397656030Z",
"provider": "osv",
"references": [
"https://access.redhat.com/errata/RHSA-2019:1259",
"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*"
],
"vendor_product": "microsoft:.net_framework",
"extracted_events": [
{
"range": [
{
"introduced": "2.0-sp2"
},
{
"last_affected": "2.0-sp2"
},
{
"introduced": "3.0-sp2"
},
{
"last_affected": "3.0-sp2"
},
{
"introduced": "3.5"
},
{
"last_affected": "3.5"
},
{
"introduced": "3.5.1"
},
{
"last_affected": "3.5.1"
},
{
"introduced": "4.5.2"
},
{
"last_affected": "4.5.2"
},
{
"introduced": "4.6"
},
{
"last_affected": "4.6"
},
{
"introduced": "4.6.2"
},
{
"last_affected": "4.6.2"
},
{
"introduced": "4.6.2"
},
{
"last_affected": "4.6.2"
},
{
"introduced": "4.7"
},
{
"last_affected": "4.7"
},
{
"introduced": "4.7.1"
},
{
"last_affected": "4.7.1"
},
{
"introduced": "4.7.2"
},
{
"last_affected": "4.7.2"
},
{
"introduced": "4.6"
},
{
"last_affected": "4.6"
},
{
"introduced": "4.6.1"
},
{
"last_affected": "4.6.1"
},
{
"introduced": "4.6.2"
},
{
"last_affected": "4.6.2"
},
{
"introduced": "4.7"
},
{
"last_affected": "4.7"
},
{
"introduced": "4.7.1"
},
{
"last_affected": "4.7.1"
},
{
"introduced": "4.7.2"
},
{
"last_affected": "4.7.2"
},
{
"introduced": "4.7.1"
},
{
"last_affected": "4.7.1"
},
{
"introduced": "4.7.2"
},
{
"last_affected": "4.7.2"
},
{
"introduced": "4.7.2"
},
{
"last_affected": "4.7.2"
},
{
"introduced": "4.7"
},
{
"last_affected": "4.7"
},
{
"introduced": "4.7.1"
},
{
"last_affected": "4.7.1"
},
{
"introduced": "4.7.2"
},
{
"last_affected": "4.7.2"
},
{
"introduced": "4.8"
},
{
"last_affected": "4.8"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2019-0980",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 436534,
"published_at": "2019-05-16T19:29:04.957+00:00"
}