CVE-2026-45591
CVE-2026-45591 · ASP.NET Core Denial of Service Vulnerability
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVSS 7.5 · Alta · EPSS 2,5% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
.net 10.0
- Versiones
- ≥ 10.0.0, < 10.0.9: Afectada (custom)
Actualiza a 10.0.9
.net 8.0
- Versiones
- ≥ 8.0.0, < 8.0.28: Afectada (custom)
Actualiza a 8.0.28
.net 9.0
- Versiones
- ≥ 9.0.0, < 9.0.17: Afectada (custom)
Actualiza a 9.0.17
asp.net core 10.0
- Versiones
- ≥ 10.0, < 10.0.9: Afectada (custom)
Actualiza a 10.0.9
asp.net core 8.0
- Versiones
- ≥ 8.0, < 8.0.28: Afectada (custom)
Actualiza a 8.0.28
asp.net core 9.0
- Versiones
- ≥ 9.0, < 9.0.17: Afectada (custom)
Actualiza a 9.0.17
microsoft visual studio 2026 version 18.6
- Versiones
- ≥ 18.6.0, < 18.6.3: Afectada (custom)
Actualiza a 18.6.3
dotnet6 Ubuntu:22.04:LTS
- Versiones
- 6.0.108-0ubuntu1~22.04.1
- 6.0.109-0ubuntu1~22.04.1
- 6.0.110-0ubuntu1~22.04.1
- 6.0.111-0ubuntu1~22.04.1
- 6.0.113-0ubuntu1~22.04.1
- 6.0.116-0ubuntu1~22.04.1
- 6.0.118-0ubuntu1~22.04.1
- 6.0.119-0ubuntu1~22.04.1
- 6.0.120-0ubuntu1~22.04.1
- 6.0.121-0ubuntu1~22.04.1
- 6.0.122-0ubuntu1~22.04.1
- 6.0.123-0ubuntu1~22.04.1
- 6.0.124-0ubuntu1~22.04.1
- 6.0.125-0ubuntu1~22.04.1
- 6.0.126-0ubuntu1~22.04.1
- 6.0.127-0ubuntu1~22.04.1
- 6.0.128-0ubuntu1~22.04.2
- 6.0.132-0ubuntu1~22.04.1
- 6.0.133-0ubuntu1~22.04.1
- 6.0.135-0ubuntu1~22.04.1
- 6.0.136-0ubuntu1~22.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
dotnet7 Ubuntu:22.04:LTS
- Versiones
- 7.0.105-0ubuntu1~22.04.1
- 7.0.107-0ubuntu1~22.04.1
- 7.0.108-0ubuntu1~22.04.1
- 7.0.109-0ubuntu1~22.04.1
- 7.0.110-0ubuntu1~22.04.1
- 7.0.111-0ubuntu1~22.04.1
- 7.0.112-0ubuntu1~22.04.1
- 7.0.113-0ubuntu1~22.04.1
- 7.0.114-0ubuntu1~22.04.1
- 7.0.115-0ubuntu1~22.04.1
- 7.0.116-0ubuntu1~22.04.1
- 7.0.117-0ubuntu1~22.04.1
- 7.0.117-0ubuntu1~22.04.2
- 7.0.119-0ubuntu1~22.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
dotnet8 Ubuntu:22.04:LTS
- Versiones
- 8.0.102-8.0.2-0ubuntu1~22.04.1
- 8.0.103-8.0.3-0ubuntu1~22.04.1
- 8.0.103-8.0.3-0ubuntu1~22.04.2
- 8.0.105-8.0.5-0ubuntu1~22.04.1
- 8.0.107-8.0.7-0ubuntu1~22.04.1
- 8.0.108-8.0.8-0ubuntu1~22.04.1
- 8.0.110-8.0.10-0ubuntu1~22.04.1
- 8.0.111-8.0.11-0ubuntu1~22.04.1
- 8.0.112-8.0.12-0ubuntu1~22.04.1
- 8.0.114-8.0.14-0ubuntu1~22.04.1
- 8.0.115-8.0.15-0ubuntu1~22.04.1
- 8.0.116-8.0.16-0ubuntu1~22.04.1
- 8.0.117-8.0.17-0ubuntu1~22.04.1
- 8.0.118-8.0.18-0ubuntu1~22.04.1
- 8.0.119-8.0.19-0ubuntu1~22.04.1
- 8.0.120-8.0.20-0ubuntu1~22.04.1
- 8.0.121-8.0.21-0ubuntu1~22.04.1
- 8.0.122-8.0.22-0ubuntu1~22.04.1
- 8.0.123-8.0.23-0ubuntu1~22.04.1
- 8.0.124-8.0.24-0ubuntu1~22.04.1
- 8.0.125-8.0.25-0ubuntu1~22.04.1
- 8.0.126-8.0.26-0ubuntu1~22.04.1
- 8.0.127-8.0.27-0ubuntu1~22.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 8.0.128-8.0.28-0ubuntu1~22.04.1
Actualiza a 8.0.128-8.0.28-0ubuntu1~22.04.1
dotnet10 Ubuntu:24.04:LTS
- Versiones
- 10.0.100-10.0.0-0ubuntu1~24.04.1
- 10.0.101-10.0.1-0ubuntu1~24.04.2
- 10.0.103-10.0.3-0ubuntu1~24.04.1
- 10.0.104-10.0.4-0ubuntu1~24.04.1
- 10.0.105-10.0.5-0ubuntu1~24.04.1
- 10.0.106-10.0.6-0ubuntu1~24.04.1
- 10.0.107-10.0.7-0ubuntu1~24.04.1
- 10.0.108-10.0.8-0ubuntu1~24.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 10.0.109-10.0.9-0ubuntu1~24.04.1
Actualiza a 10.0.109-10.0.9-0ubuntu1~24.04.1
dotnet8 Ubuntu:24.04:LTS
- Versiones
- 8.0.100-8.0.0~rc1-0ubuntu1
- 8.0.100-8.0.0~rc2-0ubuntu1
- 8.0.100-8.0.0~rc2-0ubuntu2
- 8.0.100-8.0.0-0ubuntu1
- 8.0.100-8.0.0-0ubuntu2
- 8.0.101-8.0.1-0ubuntu1
- 8.0.101-8.0.1-0ubuntu2
- 8.0.102-8.0.2-0ubuntu1
- 8.0.103-8.0.3-0ubuntu2
- 8.0.103-8.0.3-0ubuntu3
- 8.0.104-8.0.4-0ubuntu1
- 8.0.105-8.0.5-0ubuntu1~24.04.1
- 8.0.107-8.0.7-0ubuntu1~24.04.1
- 8.0.108-8.0.8-0ubuntu1~24.04.1
- 8.0.108-8.0.8-0ubuntu1~24.04.2
- 8.0.110-8.0.10-0ubuntu1~24.04.1
- 8.0.111-8.0.11-0ubuntu1~24.04.1
- 8.0.112-8.0.12-0ubuntu1~24.04.1
- 8.0.114-8.0.14-0ubuntu1~24.04.1
- 8.0.115-8.0.15-0ubuntu1~24.04.1
- 8.0.116-8.0.16-0ubuntu1~24.04.1
- 8.0.117-8.0.17-0ubuntu1~24.04.1
- 8.0.118-8.0.18-0ubuntu1~24.04.1
- 8.0.119-8.0.19-0ubuntu1~24.04.1
- 8.0.120-8.0.20-0ubuntu1~24.04.1
- 8.0.121-8.0.21-0ubuntu1~24.04.1
- 8.0.122-8.0.22-0ubuntu1~24.04.1
- 8.0.123-8.0.23-0ubuntu1~24.04.1
- 8.0.124-8.0.24-0ubuntu1~24.04.1
- 8.0.125-8.0.25-0ubuntu1~24.04.1
- 8.0.126-8.0.26-0ubuntu1~24.04.1
- 8.0.127-8.0.27-0ubuntu1~24.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 8.0.128-8.0.28-0ubuntu1~24.04.1
Actualiza a 8.0.128-8.0.28-0ubuntu1~24.04.1
dotnet10 Ubuntu:25.10
- Versiones
- 10.0.100-10.0.0~rc1-0ubuntu1
- 10.0.100-10.0.0~rc2-0ubuntu1~25.10.2
- 10.0.100-10.0.0-0ubuntu1~25.10.1
- 10.0.101-10.0.1-0ubuntu1~25.10.2
- 10.0.103-10.0.3-0ubuntu1~25.10.1
- 10.0.104-10.0.4-0ubuntu1~25.10.1
- 10.0.105-10.0.5-0ubuntu1~25.10.1
- 10.0.106-10.0.6-0ubuntu1~25.10.1
- 10.0.107-10.0.7-0ubuntu1~25.10.1
- 10.0.108-10.0.8-0ubuntu1~25.10.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 10.0.109-10.0.9-0ubuntu1~25.10.1
Actualiza a 10.0.109-10.0.9-0ubuntu1~25.10.1
dotnet8 Ubuntu:25.10
- Versiones
- 8.0.115-8.0.15-0ubuntu1
- 8.0.116-8.0.16-0ubuntu1
- 8.0.117-8.0.17-0ubuntu1
- 8.0.118-8.0.18-0ubuntu1
- 8.0.119-8.0.19-0ubuntu1
- 8.0.120-8.0.20-0ubuntu1
- 8.0.121-8.0.21-0ubuntu1~25.10.1
- 8.0.122-8.0.22-0ubuntu1~25.10.1
- 8.0.123-8.0.23-0ubuntu1~25.10.1
- 8.0.124-8.0.24-0ubuntu1~25.10.1
- 8.0.125-8.0.25-0ubuntu1~25.10.1
- 8.0.126-8.0.26-0ubuntu1~25.10.1
- 8.0.127-8.0.27-0ubuntu1~25.10.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 8.0.128-8.0.28-0ubuntu1~25.10.1
Actualiza a 8.0.128-8.0.28-0ubuntu1~25.10.1
dotnet9 Ubuntu:25.10
- Versiones
- 9.0.105-9.0.4-0ubuntu1
- 9.0.106-9.0.5-0ubuntu1
- 9.0.107-9.0.6-0ubuntu1
- 9.0.108-9.0.7-0ubuntu1
- 9.0.109-9.0.8-0ubuntu1
- 9.0.110-9.0.9-0ubuntu1
- 9.0.111-9.0.10-0ubuntu1~25.10.1
- 9.0.112-9.0.11-0ubuntu1~25.10.1
- 9.0.113-9.0.12-0ubuntu1~25.10.1
- 9.0.114-9.0.13-0ubuntu1~25.10.1
- 9.0.115-9.0.14-0ubuntu1~25.10.1
- 9.0.116-9.0.15-0ubuntu1~25.10.1
- 9.0.117-9.0.16-0ubuntu1~25.10.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 9.0.118-9.0.17-0ubuntu1~25.10.1
Actualiza a 9.0.118-9.0.17-0ubuntu1~25.10.1
dotnet10 Ubuntu:26.10
- Versiones
- 10.0.105-10.0.5-0ubuntu1
- 10.0.107-10.0.7-0ubuntu1~26.04.1
- 10.0.108-10.0.8-0ubuntu1
- Intervalos de versiones afectados
- ECOSYSTEM: < 10.0.109-10.0.9-0ubuntu1
Actualiza a 10.0.109-10.0.9-0ubuntu1
dotnet10 Ubuntu:26.04:LTS
- Versiones
- 10.0.100-10.0.0~rc1-0ubuntu1
- 10.0.100-10.0.0~rc2-0ubuntu1
- 10.0.100-10.0.0-0ubuntu1
- 10.0.100-10.0.0-0ubuntu2
- 10.0.101-10.0.1-0ubuntu1
- 10.0.101-10.0.1-0ubuntu2
- 10.0.101-10.0.1-0ubuntu3
- 10.0.102-10.0.2-0ubuntu1
- 10.0.103-10.0.3-0ubuntu1
- 10.0.104-10.0.4-0ubuntu1
- 10.0.105-10.0.5-0ubuntu1
- 10.0.107-10.0.7-0ubuntu1~26.04.1
- 10.0.108-10.0.8-0ubuntu1~26.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 10.0.109-10.0.9-0ubuntu1~26.04.1
Actualiza a 10.0.109-10.0.9-0ubuntu1~26.04.1
Fuentes originales
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591
- https://access.redhat.com/security/cve/CVE-2026-45591
- https://bugzilla.redhat.com/show_bug.cgi?id=2487224
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45591.json
- https://access.redhat.com/errata/RHSA-2026:28007
- https://access.redhat.com/errata/RHSA-2026:28009
- https://access.redhat.com/errata/RHSA-2026:25115
- https://access.redhat.com/errata/RHSA-2026:25111
- https://access.redhat.com/errata/RHSA-2026:25112
- https://access.redhat.com/errata/RHSA-2026:25114
- https://access.redhat.com/errata/RHSA-2026:25110
- https://access.redhat.com/errata/RHSA-2026:25113
- https://access.redhat.com/errata/RHSA-2026:28227
- https://access.redhat.com/errata/RHSA-2026:28011
- https://access.redhat.com/errata/RHSA-2026:28051
- https://access.redhat.com/errata/RHSA-2026:25222
- https://access.redhat.com/errata/RHSA-2026:25220
- https://access.redhat.com/errata/RHSA-2026:25221
- https://access.redhat.com/errata/RHSA-2026:26638
- https://access.redhat.com/errata/RHSA-2026:26994
- https://access.redhat.com/errata/RHSA-2026:17527
- https://nvd.nist.gov/vuln/detail/CVE-2026-45591