GitHub Advisoryadvisory · NuGet

GHSA-35hc-x2cw-2j4v Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents

HIGH Published 2018-10-16 Modified 2022-04-26 Official page ↗
Aliases
CVE-2018-0765
Ecosystem
NuGet
Packages
System.Security.Cryptography.Xml
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-611
Reviewed
2020-06-16

Affected packages

• NuGet System.Security.Cryptography.Xml: < 4.4.2 → fixed in 4.4.2

Description

A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, .NET Core 2.0, Microsoft .NET Framework 4.7.2.

Related

Alias · CVE (1)

  • CVE-2018-0765 A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of… vulnerability

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References