Vulnerability in Microsoft .Net Framework
CVE-2018-8517
A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of Service Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft…
EPSS: 0.058 (92.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Microsoft .Net Framework — versions 3.5 on Windows 10 Version 1607 for 32-bit Systems, 3.5 on Windows 10 Version 1607 for x64-based Systems, 3.5 on Windows 10 Version 1703 for 32-bit Systems
- Microsoft .Net_framework — versions 3.5, 3.5.1, 4.5.2
- Microsoft Windows_10 — versions 1607, 1703, 1709
- Microsoft Windows_7
- Microsoft Windows_8.1
- Microsoft Windows_rt_8.1
- Microsoft Windows_server_2008 — versions r2
- Microsoft Windows_server_2012 — versions r2
- Microsoft Windows_server_2016 — versions 1709, 1803
- Microsoft Windows_server_2019
References
- secure@microsoft.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- secure@microsoft.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2018-8517?
- CVE-2018-8517 is a high-severity vulnerability in Microsoft .Net Framework. CVSS score: 7.5/10. Published 2018-12-12.
- How severe is CVE-2018-8517?
- High severity. CVSS v3 base score is 7.5 out of 10.