CVEvulnerability
CVE-2018-0765
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-05-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-611
Description
A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, .NET Core 2.0, Microsoft .NET Framework 4.7.2.
Affected configurations
• microsoft .net core 2.0
• microsoft .net framework 2.0
• microsoft .net framework 3.0
• microsoft .net framework 3.5
• microsoft .net framework 3.5.1
• microsoft .net framework 4.5.2
• microsoft .net framework 4.6
• microsoft .net framework 4.6.2
• microsoft .net framework 4.7
• microsoft .net framework 4.7.1
• microsoft .net framework 4.6.1
• microsoft .net framework 4.7.2
Related
Weakness · CWE (1)
- CWE-611 Improper Restriction of XML External Entity Reference weakness
References
- http://www.securityfocus.com/bid/104060 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040851 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0765 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/104060 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040851 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0765 Patch, Vendor Advisory