GHSA-35hc-x2cw-2j4vHighCVSS 7.5

Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents

Published
October 16, 2018
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

📋 Description

A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, .NET Core 2.0, Microsoft .NET Framework 4.7.2.

🎯 Affected products1

  • nuget/System.Security.Cryptography.Xml:< 4.4.2

🔗 References (5)