CVE:CVE-2017-0247
CNNVD:CNNVD-201705-737
Microsoft ASP.NET Core是美国微软（Microsoft）公司的一个跨平台开源框架。该框架用于构建Web应用、物联网应用和移动后端等基于云的应用程序。
Microsoft ASP.NET Core中存在拒绝服务漏洞，该漏洞源于程序没有正确的验证Web请求。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade microsoft asp.net_model_view_controller to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2; Upgrade microsoft microsoft.aspnetcore.mvc.abstractions to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2; Upgrade microsoft microsoft.aspnetcore.mvc.apiexplorer to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2; Upgrade microsoft microsoft.aspnetcore.mvc.cors to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2; Upgrade microsoft microsoft.aspnetcore.mvc.dataannotations to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2; Upgrade microsoft microsoft.aspnetcore.mvc.formatters.json to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2; Upgrade microsoft microsoft.aspnetcore.mvc.formatters.xml to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2; Upgrade microsoft microsoft.aspnetcore.mvc.localization to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2; Upgrade microsoft microsoft.aspnetcore.mvc.razor to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2; Upgrade microsoft microsoft.aspnetcore.mvc.razor.host to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2; Upgrade microsoft microsoft.aspnetcore.mvc.taghelpers to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2; Upgrade microsoft microsoft.aspnetcore.mvc.viewfeatures to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2; Upgrade microsoft microsoft.aspnetcore.mvc.webapicompatshim to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.1.0,1.1.1,1.1.2; Upgrade microsoft system.net.http to a higher version than 4.1.1,4.3.1,and avoid the version 4.1.1,4.3.1; Upgrade microsoft system.net.http.winhttphandler to a higher version than 4.0.1,4.3.0,and avoid the version 4.0.1,4.3.0; Upgrade microsoft system.net.security to a higher version than 4.0.0,4.3.0,and avoid the version 4.0.0,4.3.0; Upgrade microsoft system.net.websockets.client to a higher version than 4.0.0,4.3.0,and avoid the version 4.0.0,4.3.0; Upgrade microsoft system.text.encodings.web to a higher version than 4.0.0,4.3.0,and avoid the version 4.0.0,4.3.0