CVE-2017-11770High
.NET CORE Denial Of Service Vulnerability
🔗 CVE IDs covered (1)
📋 Description
A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by providing a specially crafted certificate to the .NET Core application. The update addresses the vulnerability by correcting how the .NET Core web application handles parsing certificate data.
🎯 Affected products3
- .NET Core 1.0
- .NET Core 1.1
- .NET Core 2.0
✅ Remediation
KBCommit (Security Update)