GHSA-35hc-x2cw-2j4v
Suggest an improvement- Source
- https://github.com/advisories/GHSA-35hc-x2cw-2j4v
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-35hc-x2cw-2j4v/GHSA-35hc-x2cw-2j4v.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-35hc-x2cw-2j4v
- Aliases
- Published
- 2018-10-16T19:54:06Z
- Modified
- 2023-11-08T03:59:30.969126Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
- Details
-
A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, .NET Core 2.0, Microsoft .NET Framework 4.7.2.
- Database specific
{ "nvd_published_at": null, "github_reviewed_at": "2020-06-16T20:54:06Z", "severity": "HIGH", "github_reviewed": true, "cwe_ids": [ "CWE-611" ] }- References
Affected packages
NuGet / System.Security.Cryptography.Xml
Package
- Name
- System.Security.Cryptography.Xml
- View open source insights on deps.dev
- Purl
- pkg:nuget/System.Security.Cryptography.Xml