CVE-2017-8585

Опубликовано: 11 июл. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Средний

Описание

Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resulting in denial of service, aka .NET Denial of Service Vulnerability.

Ссылки

http://www.securityfocus.com/bid/99432
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038864
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:3248
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8585
Patch
Vendor Advisory
http://www.securityfocus.com/bid/99432
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038864
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:3248
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8585
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.18597

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2017-8585

CVSS3: 5.3

redhat

больше 7 лет назад

CVE-2017-8585

msrc

почти 8 лет назад

.NET Denial of Service Vulnerability

GHSA-8884-xcr4-r68p

CVSS3: 7.5

github

около 3 лет назад

Improper Input Validation in Microsoft.NETCore.App

EPSS

Процентиль: 95%

0.18597

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20