GHSA-35hc-x2cw-2j4v
Dashboard / Vulnerabilities / GHSA-35hc-x2cw-2j4v
Summary: Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
Details: A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, .NET Core 2.0, Microsoft .NET Framework 4.7.2.
References: https://nvd.nist.gov/vuln/detail/CVE-2018-0765, https://github.com/advisories/GHSA-35hc-x2cw-2j4v, https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0765, http://www.securityfocus.com/bid/104060, http://www.securitytracker.com/id/1040851
Affected packages
Package
Name: System.Security.Cryptography.Xml
Purl: pkg:nuget/System.Security.Cryptography.Xml
Affected ranges
Type: ECOSYSTEM
Events:
