CVE-2019-0864

EUVD-2019-1613
A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of Service Vulnerability'.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 33%
Affected Products (NVD)
VendorProductVersion
microsoft.net_framework
2.0:sp2
microsoft.net_framework
3.0:sp2
microsoft.net_framework
3.5
microsoft.net_framework
3.5.1
microsoft.net_framework
4.5.2
microsoft.net_framework
4.6
microsoft.net_framework
4.6.2
microsoft.net_framework
4.6.2
microsoft.net_framework
4.7
microsoft.net_framework
4.7.1
microsoft.net_framework
4.7.2
microsoft.net_framework
4.6
microsoft.net_framework
4.6.1
microsoft.net_framework
4.6.2
microsoft.net_framework
4.7
microsoft.net_framework
4.7.1
microsoft.net_framework
4.7.2
microsoft.net_framework
4.7.1
microsoft.net_framework
4.7.2
microsoft.net_framework
4.7.2
microsoft.net_framework
4.7
microsoft.net_framework
4.7.1
microsoft.net_framework
4.7.2
microsoft.net_framework
4.8
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB4499154
1607 (x64, x86)
KB4494440
1607 (x64, x86)
KB4495610
1703 (x64, x86)
KB4495611
1703 (x64, x86)
KB4499181
1709 (arm64, x64, x86)
KB4499179
1709 (x64, x86)
KB4495613
1803 (arm64, x64, x86)
KB4499167
1803 (x64, x86)
KB4495616
1809 (x64, x64, x86, x86)
KB4499405
1903 (x64, x86)
KB4495620
Windows 7
Service Pack 1 (x64, x64, x64, x64, x86, x86, x86, x86)
KB4499406
Windows 8.1
(x64, x64, x64, x64, x86, x86, x86, x86)
KB4499408
Windows RT 8.1
All
KB4499408
Windows Server
1803 Server Core
KB4499167
1803 Server Core
KB4495616
1903 Server Core
KB4495620
Windows Server 2008
Service Pack 2 (x64, x64, x64, x86, x86, x86)
KB4499409
Windows Server 2008 R2
Service Pack 1 (x64, x64, x64, x64)
KB4499406
Service Pack 1 Server Core (x64, x64, x64, x64)
KB4499406
Windows Server 2012
Server Core
KB4499407
Standard
KB4499407
Windows Server 2012 R2
Server Core
KB4499408
Standard
KB4499408
Windows Server 2016
Server Core
KB4494440
Server Core
KB4495610
Standard
KB4494440
Standard
KB4495610
Windows Server 2019
Server Core
KB4499405
Standard
KB4499405
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0864
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0864