CVE-2021-1723: fedoraproject fedora

CVSS: 7.5v3.1HighModified

AliasesRHSA-2021:0094RHSA-2021:0095RHSA-2021:0096+3 more

Published 12-01-2021Last modified 28-05-2026

Vulnerability summary

CVE-2021-1723 is a high (CVSS 7.5) vulnerability in fedoraproject fedora. EPSS estimates a 5.30% chance of exploitation in the next 30 days, higher than 92.4% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (CVE.org)

EPSS score

5.30%

0%100%

Low · +0.39 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

12-01-2021
PublishedVulnerability first disclosed.
28-05-2026
Last modifiedVulnerability information updated.

Description

ASP.NET Core and Visual Studio Denial of Service Vulnerability

CVSS metrics

5 scores · 4 sources · 2 versions

v3.17.5v2.05.0

EPSS trend

Probability

5.30%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

+0.39 pp

From 4.91% on 19-09-2026

19-09-202619-10-2026

EPSS score

5.30%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat58 products

aspnetcore-runtime-3.1< 0:3.1.11-1.el8_3
aspnetcore-runtime-5.0< 0:5.0.2-2.el8_3
aspnetcore-targeting-pack-3.1< 0:3.1.11-1.el8_3
aspnetcore-targeting-pack-5.0< 0:5.0.2-2.el8_3
dotnet< 0:5.0.102-2.el8_3

dotnet-apphost-pack-3.1< 0:3.1.11-1.el8_3
dotnet-apphost-pack-3.1-debuginfo< 0:3.1.11-1.el8_3
dotnet-apphost-pack-5.0< 0:5.0.2-2.el8_3
dotnet-apphost-pack-5.0-debuginfo< 0:5.0.2-2.el8_3
dotnet-host< 0:5.0.2-2.el8_3
dotnet-host-debuginfo< 0:5.0.2-2.el8_3
dotnet-hostfxr-3.1< 0:3.1.11-1.el8_3
dotnet-hostfxr-3.1-debuginfo< 0:3.1.11-1.el8_3
dotnet-hostfxr-5.0< 0:5.0.2-2.el8_3
dotnet-hostfxr-5.0-debuginfo< 0:5.0.2-2.el8_3
dotnet-runtime-3.1< 0:3.1.11-1.el8_3
dotnet-runtime-3.1-debuginfo< 0:3.1.11-1.el8_3
dotnet-runtime-5.0< 0:5.0.2-2.el8_3
dotnet-runtime-5.0-debuginfo< 0:5.0.2-2.el8_3
dotnet-sdk-3.1< 0:3.1.111-1.el8_3
dotnet-sdk-3.1-debuginfo< 0:3.1.111-1.el8_3
dotnet-sdk-5.0< 0:5.0.102-2.el8_3
dotnet-sdk-5.0-debuginfo< 0:5.0.102-2.el8_3
dotnet-targeting-pack-3.1< 0:3.1.11-1.el8_3
dotnet-targeting-pack-5.0< 0:5.0.2-2.el8_3
dotnet-templates-3.1< 0:3.1.111-1.el8_3
dotnet-templates-5.0< 0:5.0.102-2.el8_3
dotnet3.1< 0:3.1.111-1.el8_3
dotnet3.1-debuginfo< 0:3.1.111-1.el8_3
dotnet3.1-debugsource< 0:3.1.111-1.el8_3
dotnet5.0< 0:5.0.102-2.el8_3
dotnet5.0-debuginfo< 0:5.0.102-2.el8_3
dotnet5.0-debugsource< 0:5.0.102-2.el8_3
netstandard-targeting-pack-2.1< 0:5.0.102-2.el8_3
rh-dotnet31-aspnetcore-runtime-3.1< 0:3.1.11-1.el7_9
rh-dotnet31-aspnetcore-targeting-pack-3.1< 0:3.1.11-1.el7_9
rh-dotnet31-dotnet< 0:3.1.111-1.el7_9
rh-dotnet31-dotnet-apphost-pack-3.1< 0:3.1.11-1.el7_9
rh-dotnet31-dotnet-debuginfo< 0:3.1.111-1.el7_9
rh-dotnet31-dotnet-host< 0:3.1.11-1.el7_9
rh-dotnet31-dotnet-hostfxr-3.1< 0:3.1.11-1.el7_9
rh-dotnet31-dotnet-runtime-3.1< 0:3.1.11-1.el7_9
rh-dotnet31-dotnet-sdk-3.1< 0:3.1.111-1.el7_9
rh-dotnet31-dotnet-targeting-pack-3.1< 0:3.1.11-1.el7_9
rh-dotnet31-dotnet-templates-3.1< 0:3.1.111-1.el7_9
rh-dotnet31-netstandard-targeting-pack-2.1< 0:3.1.111-1.el7_9
rh-dotnet50-aspnetcore-runtime-5.0< 0:5.0.2-1.el7_9
rh-dotnet50-aspnetcore-targeting-pack-5.0< 0:5.0.2-1.el7_9
rh-dotnet50-dotnet< 0:5.0.102-1.el7_9
rh-dotnet50-dotnet-apphost-pack-5.0< 0:5.0.2-1.el7_9
rh-dotnet50-dotnet-debuginfo< 0:5.0.102-1.el7_9
rh-dotnet50-dotnet-host< 0:5.0.2-1.el7_9
rh-dotnet50-dotnet-hostfxr-5.0< 0:5.0.2-1.el7_9
rh-dotnet50-dotnet-runtime-5.0< 0:5.0.2-1.el7_9
rh-dotnet50-dotnet-sdk-5.0< 0:5.0.102-1.el7_9
rh-dotnet50-dotnet-targeting-pack-5.0< 0:5.0.2-1.el7_9
rh-dotnet50-dotnet-templates-5.0< 0:5.0.102-1.el7_9
rh-dotnet50-netstandard-targeting-pack-2.1< 0:5.0.102-1.el7_9

Show all 58

NuGet12 products

Microsoft.AspNetCore.App.Runtime.linux-arm≥ 3.1.0, < 3.1.11 | ≥ 5.0.0, < 5.0.2
Microsoft.AspNetCore.App.Runtime.linux-arm64≥ 3.1.0, < 3.1.11 | ≥ 5.0.0, < 5.0.2
Microsoft.AspNetCore.App.Runtime.linux-musl-arm≥ 5.0.1, < 5.0.2
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64≥ 3.1.0, < 3.1.11 | ≥ 5.0.0, < 5.0.2
Microsoft.AspNetCore.App.Runtime.linux-musl-x64≥ 3.1.0, < 3.1.11 | ≥ 5.0.0, < 5.0.2

Show all 12

Microsoft7 products

asp.net_core≥ 3.1, ≤ 3.1.10 | ≥ 5.0, ≤ 5.0.1
asp.net core 3.1≥ 3.0, < publication
asp.net core 5.0≥ 5.0, < publication
microsoft visual studio 2019 version 16.4 (includes 16.0 - 16.3)≥ 16.0, < publication
microsoft visual studio 2019 version 16.7 (includes 16.0 – 16.6)≥ 16.0.0, < publication

Show all 7

Fedoraproject1 product

fedoraEOL32 | 33

4 vendors · 78 products

References

19 links

msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1723Vendor AdvisoryWEB
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1723X Refsource MISCX Transferred
access.redhat.com/errata/RHSA-2021:0094Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1914258REPORT
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0094.jsonAdvisory
access.redhat.com/security/cve/CVE-2021-1723REPORT
www.cve.org/CVERecord?id=CVE-2021-1723Advisory
nvd.nist.gov/vuln/detail/CVE-2021-1723Advisory
github.com/dotnet/announcements/issues/170ARTICLEWEB

Show all 19 references

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities