cbcvebase.
CVE-2018-0765
published 2018-05-09

CVE-2018-0765: A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability."…

high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, .NET Core 2.0, Microsoft .NET Framework 4.7.2.

Affected

29 ranges· showing 25
VendorProductVersion rangeFixed in
microsoftnet_core
microsoftnet_core
microsoftnet_core
microsoftnet_framework
microsoftnet_framework
microsoftnet_framework
microsoftnet_framework
microsoftnet_framework
microsoftnet_framework
microsoftnet_framework
microsoftnet_framework
microsoftnet_framework
microsoftnet_framework
microsoftnet_framework
microsoftpowershell_core
microsoft_corporationnet_framework_and_net_core
msrcmicrosoft_net_framework_2.0_service_pack_2
msrcmicrosoft_net_framework_3.0_service_pack_2
msrcmicrosoft_net_framework_3.5
msrcmicrosoft_net_framework_3.5.1
msrcmicrosoft_net_framework_4.5.2
msrcmicrosoft_net_framework_4.6
msrcmicrosoft_net_framework_4.6.2_4.7_4.7.1
msrcmicrosoft_net_framework_4.6_4.6.1_4.6.2
msrcmicrosoft_net_framework_4.6_4.6.1_4.6.2_4.7_4.7.1

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ghsa7.5HIGH
osv7.5HIGH