CVE-2017-11883

Опубликовано: 15 нояб. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Средний

Описание

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability".

Ссылки

http://www.securityfocus.com/bid/101835
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039793
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11883
Patch
Vendor Advisory
http://www.securityfocus.com/bid/101835
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039793
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11883
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:aspnetcore:1.0:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:aspnetcore:1.1:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:aspnetcore:2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.16008

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2017-11883

CVSS3: 7.5

redhat

больше 7 лет назад

CVE-2017-11883

msrc

больше 7 лет назад

ASP.NET Core Denial of Service Vulnerability

GHSA-f9jc-rrm2-pmfg

CVSS3: 7.5

github

около 3 лет назад

Denial of service in ASP.NET Core

EPSS

Процентиль: 94%

0.16008

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo