Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vulnerability". This CVE is unique from CVE-2018-0765.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-0764US | high7.5 | — | ||
Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to th… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.securityfocus.com/bid/102387WEB
- http://www.securitytracker.com/id/1040152WEB
- https://access.redhat.com/errata/RHSA-2018:0379WEB
- https://github.com/advisories/GHSA-rr3c-f55v-qhv5ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2018-0764ADVISORY
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0764WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan