Описание
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vulnerability". This CVE is unique from CVE-2018-0765.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2018-0764
- https://access.redhat.com/errata/RHSA-2018:0379
- https://github.com/advisories/GHSA-rr3c-f55v-qhv5
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0764
- http://www.securityfocus.com/bid/102387
- http://www.securitytracker.com/id/1040152
Пакеты
System.Security.Cryptography.Xml
< 4.4.2
4.4.2
Связанные уязвимости
Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vulnerability". This CVE is unique from CVE-2018-0765.
Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vulnerability". This CVE is unique from CVE-2018-0765.
ALT-PU-2018-1279: package `dotnet-sdk` update to version 2.0.5-alt1
ALT-PU-2018-1278: package `dotnet-corefx` update to version 2.0.5-alt1