First published: Wed May 09 2018(Updated: )
A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, .NET Core 2.0, Microsoft .NET Framework 4.7.2.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft .NET Core | =2.0 | |
Microsoft .NET Framework | =2.0-sp2 | |
Microsoft .NET Framework | =3.0-sp2 | |
Microsoft Windows Server 2008 | =sp2 | |
Microsoft .NET Framework | =3.5 | |
Microsoft Windows 10 | ||
Microsoft Windows 10 | =1607 | |
Microsoft Windows 10 | =1703 | |
Microsoft Windows 10 | =1709 | |
Microsoft Windows 10 | =1803 | |
Microsoft Windows 8.1 | ||
Microsoft Windows Server 2012 | ||
Microsoft Windows Server 2012 | =r2 | |
Microsoft Windows Server 2016 | ||
Microsoft Windows Server 2016 | =1803 | |
Microsoft .NET Framework | =3.5.1 | |
Microsoft Windows 7 | =sp1 | |
Microsoft Windows Server 2008 | =r2-sp1 | |
Microsoft .NET Framework | =4.5.2 | |
Microsoft Windows RT 8.1 | ||
Microsoft .NET Framework | =4.6 | |
Microsoft .NET Framework | =4.6.2 | |
Microsoft .NET Framework | =4.7 | |
Microsoft .NET Framework | =4.7.1 | |
Microsoft .NET Framework | =4.6.1 | |
Microsoft .NET Framework | =4.7.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-0765 refers to a denial of service vulnerability in .NET and .NET Core when processing XML documents.
CVE-2018-0765 affects Microsoft .NET Framework versions 2.0, 3.0, 4.7.1, and .NET Core 2.0.
CVE-2018-0765 has a severity rating of high with a CVSS score of 7.5.
CVE-2018-0765 can be exploited to cause a denial of service on systems running affected versions of .NET Framework and .NET Core.
Yes, Microsoft has released security updates to address CVE-2018-0765. It is recommended to install the latest updates to protect against this vulnerability.