CVE-2017-11770

2017-11-1400:00:00

microsoft

www.cve.org

7.4 High

AI Score

Confidence

High

0.026 Low

EPSS

Percentile

90.3%

JSON

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka “.NET CORE Denial Of Service Vulnerability”.

CNA Affected

[
  {
    "product": ".NET Core",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": ".NET Core 1.0, .NET Core 1.1, and .NET Core 2.0"
      }
    ]
  }
]