Lucene search

[email protected]NVD:CVE-2018-0765

HistoryMay 09, 2018 - 7:29 p.m.

CVE-2018-0765

2018-05-0919:29:00

CWE-611

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.004

Percentile

72.0%

JSON

A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka “.NET and .NET Core Denial of Service Vulnerability.” This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, .NET Core 2.0, Microsoft .NET Framework 4.7.2.

Affected configurations

Nvd

Node

microsoft.net_coreMatch2.0

Node

microsoftwindows_server_2008sp2

AND

microsoft.net_frameworkMatch2.0sp2

microsoft.net_frameworkMatch3.0sp2

Node

microsoftwindows_10Match-

microsoftwindows_10Match1607

microsoftwindows_10Match1703

microsoftwindows_10Match1709

microsoftwindows_10Match1803

microsoftwindows_8.1

microsoftwindows_server_2012

microsoftwindows_server_2012Matchr2

microsoftwindows_server_2016Match-

microsoftwindows_server_2016Match1803

AND

microsoft.net_frameworkMatch3.5

Node

microsoftwindows_7Match-sp1

microsoftwindows_server_2008Matchr2sp1

AND

microsoft.net_frameworkMatch3.5.1

Node

microsoftwindows_7Match-sp1

microsoftwindows_8.1

microsoftwindows_rt_8.1Match-

microsoftwindows_server_2008sp2

microsoftwindows_server_2008Matchr2sp1

microsoftwindows_server_2012

microsoftwindows_server_2012Matchr2

AND

microsoft.net_frameworkMatch4.5.2

Node

microsoftwindows_server_2008sp2

AND

microsoft.net_frameworkMatch4.6

Node

microsoftwindows_10Match1607

microsoftwindows_server_2016Match-

AND

microsoft.net_frameworkMatch4.6.2

microsoft.net_frameworkMatch4.7

microsoft.net_frameworkMatch4.7.1

Node

microsoftwindows_10Match-

AND

microsoft.net_frameworkMatch4.6

microsoft.net_frameworkMatch4.6.1

microsoft.net_frameworkMatch4.6.2

Node

microsoftwindows_7Match-sp1

microsoftwindows_8.1

microsoftwindows_rt_8.1Match-

microsoftwindows_server_2008Matchr2sp1

microsoftwindows_server_2012

microsoftwindows_server_2012Matchr2

AND

microsoft.net_frameworkMatch4.6

microsoft.net_frameworkMatch4.6.1

microsoft.net_frameworkMatch4.6.2

microsoft.net_frameworkMatch4.7

microsoft.net_frameworkMatch4.7.1

Node

microsoft.net_frameworkMatch4.7.1

AND

microsoftwindows_10Match1709

Node

microsoft.net_frameworkMatch4.7.2

AND

microsoftwindows_10Match1803

Node

microsoft.net_frameworkMatch4.7

microsoft.net_frameworkMatch4.7.1

AND

microsoftwindows_10Match1703

VendorProductVersionCPE
microsoft.net_core2.0cpe:2.3:a:microsoft:.net_core:2.0:*:*:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*
microsoft.net_framework2.0cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*
microsoft.net_framework3.0cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
microsoftwindows_10-cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
microsoftwindows_101607cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
microsoftwindows_101703cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
microsoftwindows_101709cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
microsoftwindows_101803cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
microsoftwindows_8.1*cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	.net_core	2.0	cpe:2.3:a:microsoft:.net_core:2.0:::::::*
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008::sp2::::::*
microsoft	.net_framework	2.0	cpe:2.3:a:microsoft:.net_framework:2.0:sp2::::::
microsoft	.net_framework	3.0	cpe:2.3:a:microsoft:.net_framework:3.0:sp2::::::
microsoft	windows_10	-	cpe:2.3:o:microsoft:windows_10:-:::::::*
microsoft	windows_10	1607	cpe:2.3:o:microsoft:windows_10:1607:::::::*
microsoft	windows_10	1703	cpe:2.3:o:microsoft:windows_10:1703:::::::*
microsoft	windows_10	1709	cpe:2.3:o:microsoft:windows_10:1709:::::::*
microsoft	windows_10	1803	cpe:2.3:o:microsoft:windows_10:1803:::::::*
microsoft	windows_8.1	*	cpe:2.3:o:microsoft:windows_8.1::::::::