7.5

CVE-2018-0764

Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vulnerability". This CVE is unique from CVE-2018-0765.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ .Net Core Version1.0
Microsoft ≫ .Net Core Version1.1
Microsoft ≫ .Net Core Version2.0
Microsoft ≫ Powershell Core Version6.0
Microsoft ≫ .Net Framework Version2.0 Updatesp2
   Microsoft ≫ Windows Server 2008 Version- Updatesp2
Microsoft ≫ .Net Framework Version3.0 Updatesp2
   Microsoft ≫ Windows Server 2008 Version- Updatesp2
Microsoft ≫ .Net Framework Version3.5
   Microsoft ≫ Windows 10 Version-
   Microsoft ≫ Windows 10 Version1511
   Microsoft ≫ Windows 10 Version1607
   Microsoft ≫ Windows 10 Version1703
   Microsoft ≫ Windows 8.1 Version-
   Microsoft ≫ Windows Server 2012 Version-
   Microsoft ≫ Windows Server 2012 Versionr2
   Microsoft ≫ Windows Server 2016 Version-
Microsoft ≫ .Net Framework Version3.5.1
   Microsoft ≫ Windows 7 Version- Updatesp1
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformitanium
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
Microsoft ≫ .Net Framework Version4.5.2
   Microsoft ≫ Windows 7 Version- Updatesp1
   Microsoft ≫ Windows 8.1 Version-
   Microsoft ≫ Windows Rt 8.1 Version-
   Microsoft ≫ Windows Server 2008 Version- Updatesp2
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
   Microsoft ≫ Windows Server 2012 Version-
   Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.6
   Microsoft ≫ Windows 10 Version-
   Microsoft ≫ Windows Server 2008 Version- Updatesp2
Microsoft ≫ .Net Framework Version4.6.1
   Microsoft ≫ Windows 10 Version1511
Microsoft ≫ .Net Framework Version4.6.2
   Microsoft ≫ Windows 10 Version1607
   Microsoft ≫ Windows Server 2016 Version-
Microsoft ≫ .Net Framework Version4.7
   Microsoft ≫ Windows 10 Version1607
   Microsoft ≫ Windows Server 2016 Version-
Microsoft ≫ .Net Framework Version4.6
   Microsoft ≫ Windows 7 Version- Updatesp1
   Microsoft ≫ Windows 8.1 Version-
   Microsoft ≫ Windows Rt 8.1 Version-
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
   Microsoft ≫ Windows Server 2012 Version-
   Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.6.1
   Microsoft ≫ Windows 7 Version- Updatesp1
   Microsoft ≫ Windows 8.1 Version-
   Microsoft ≫ Windows Rt 8.1 Version-
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
   Microsoft ≫ Windows Server 2012 Version-
   Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.6.2
   Microsoft ≫ Windows 7 Version- Updatesp1
   Microsoft ≫ Windows 8.1 Version-
   Microsoft ≫ Windows Rt 8.1 Version-
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
   Microsoft ≫ Windows Server 2012 Version-
   Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.7
   Microsoft ≫ Windows 7 Version- Updatesp1
   Microsoft ≫ Windows 8.1 Version-
   Microsoft ≫ Windows Rt 8.1 Version-
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
   Microsoft ≫ Windows Server 2012 Version-
   Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.7
   Microsoft ≫ Windows 10 Version1703
Microsoft ≫ .Net Framework Version4.7.1
   Microsoft ≫ Windows 10 Version1709
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 27.28% 0.962
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
http://www.securityfocus.com/bid/102387
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040152
Third Party Advisory
VDB Entry