Skip to content
OpenAdvisories
High · 7.5 CVE-2018-0765 EUVD-2018-0482GHSA-35hc-x2cw-2j4v

Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents

Published May 9, 2018 · Updated Aug 5, 2024 · Assigned by microsoft

Description

A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, .NET Core 2.0, Microsoft .NET Framework 4.7.2.

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet System.Security.Cryptography.Xml < 4.4.2 4.4.2 GHSA-35hc-x2cw-2j4v

References