CVE-2018-0764

EUVD-2018-0687
Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vulnerability". This CVE is unique from CVE-2018-0765.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
microsoft.net_core
1.0
microsoft.net_core
1.1
microsoft.net_core
2.0
microsoftpowershell_core
6.0
microsoft.net_framework
2.0:sp2
microsoft.net_framework
3.0:sp2
microsoft.net_framework
3.5
microsoft.net_framework
3.5.1
microsoft.net_framework
4.5.2
microsoft.net_framework
4.6
microsoft.net_framework
4.6.1
microsoft.net_framework
4.6.2
microsoft.net_framework
4.7
microsoft.net_framework
4.6
microsoft.net_framework
4.6.1
microsoft.net_framework
4.6.2
microsoft.net_framework
4.7
microsoft.net_framework
4.7
microsoft.net_framework
4.7.1
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB4056893
1511 (x64, x86)
KB4056888
1607 (x64, x86)
KB4056890
1703 (x64, x86)
KB4056891
1709 (x64, x86)
KB4056892
Windows 7
Service Pack 1 (x64, x86)
KB4054998
Service Pack 1 (x64, x86)
KB4054995
Service Pack 1 (x64, x86)
KB4074880
Windows 8.1
(x64, x86)
KB4054999
(x64, x86)
KB4054993
(x64, x86)
KB4055001
Windows RT 8.1
All
KB4055001
All
KB4054993
Windows Server
1709 Server Core
KB4056892
Windows Server 2008
Service Pack 2 (x64, x86)
KB4054996
Service Pack 2 (x64, x86)
KB4055002
Service Pack 2 (x64, x86)
KB4054995
Windows Server 2008 R2
Service Pack 1 (x64)
KB4054998
Service Pack 1 (x64)
KB4054995
Service Pack 1 (x64)
KB4074880
Service Pack 1 Server Core (x64)
KB4054998
Service Pack 1 Server Core (x64)
KB4054995
Service Pack 1 Server Core (x64)
KB4074880
Windows Server 2012
Server Core
KB4054997
Server Core
KB4054994
Server Core
KB4055000
Standard
KB4054997
Standard
KB4054994
Standard
KB4055000
Windows Server 2012 R2
Server Core
KB4054999
Server Core
KB4054993
Server Core
KB4055001
Standard
KB4054999
Standard
KB4054993
Standard
KB4055001
Windows Server 2016
Server Core
KB4056890
Standard
KB4056890
References
http://www.securityfocus.com/bid/102387
http://www.securitytracker.com/id/1040152
https://access.redhat.com/errata/RHSA-2018:0379
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0764
http://www.securityfocus.com/bid/102387
http://www.securitytracker.com/id/1040152
https://access.redhat.com/errata/RHSA-2018:0379
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0764