CVE-2018-8517Microsoft NET Framework vulnerability

4 documents4 sources
Severity
7.5HIGHNVD
EPSS
14.4%
top 5.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 12
Latest updateMay 13

Description

A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of Service Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

NVDmicrosoft/net_framework9 versions+8
CVEListV5microsoft/microsoft_net_framework70 versions+69

Patches

🔴Vulnerability Details

2
GHSA
GHSA-6m2p-4g25-m3gv: A denial of service vulnerability exists when2022-05-13
CVEList
CVE-2018-8517: A denial of service vulnerability exists when2018-12-12

📋Vendor Advisories

1
Microsoft
.NET Framework Denial Of Service Vulnerability2018-12-11
CVE-2018-8517 — Microsoft NET Framework vulnerability | cvebase