CVE-2017-11770

2017-11-1503:00:00

microsoft

www.cve.org

AI Score

7.4

Confidence

High

EPSS

0.026

Percentile

90.4%

JSON

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka “.NET CORE Denial Of Service Vulnerability”.

CNA Affected

[
  {
    "product": ".NET Core",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": ".NET Core 1.0, .NET Core 1.1, and .NET Core 2.0"
      }
    ]
  }
]