{"id":"CVE-2017-11770","published":"2017-11-15T03:00:00Z","modified":"2024-09-16T22:41:39Z","title":".NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a…","vendor":"Microsoft","product":".NET Core","tier":"tail","description":{"text":".NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka \".NET CORE Denial Of Service Vulnerability\".","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.05423,"percentile":0.92648,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.securitytracker.com/id/1039787","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11770","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3248","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securityfocus.com/bid/101710","tags":["vdb-entry","x_refsource_BID"]}],"priority":{"score":18.5,"factors":[{"name":"EPSS percentile","points":18.53}]},"vendorSlug":"microsoft","affectedVersions":[{"vendor":"Microsoft Corporation","product":".NET Core","versions":[".NET Core 1.0, .NET Core 1.1, and .NET Core 2.0"]}],"affected":[{"ecosystem":"NuGet","package":"System.Security.Cryptography.X509Certificates","vulnerableRanges":[">=4.0.0, <4.1.2"],"patched":["4.1.2"],"from":["GHSA-7mfr-774f-w5r9"],"provenance":"source"},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App","vulnerableRanges":[">=1.0.0, <2.0.3"],"patched":["2.0.3"],"from":["GHSA-7mfr-774f-w5r9"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-1668","exploited":false,"provenance":"source"}}