Description
Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vulnerability". This CVE is unique from CVE-2018-0765.
Published: 2018-01-10
Score: 7.5 High
EPSS: 34.7% Moderate
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-rr3c-f55v-qhv5 Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
History

No history.

Subscriptions

Microsoft .net Core .net Framework Powershell Core Windows 10 Windows 7 Windows 8.1 Windows Rt 8.1 Windows Server 2008 Windows Server 2012 Windows Server 2016
Redhat Rhel Dotnet
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2024-09-17T02:16:15.781Z

Reserved: 2017-12-01T00:00:00.000Z

Link: CVE-2018-0764

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-01-10T01:29:00.197

Modified: 2024-11-21T03:38:54.277

Link: CVE-2018-0764

cve-icon Redhat

Severity : Moderate

Publid Date: 2017-11-17T00:00:00Z

Links: CVE-2018-0764 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses