{"id":"CVE-2018-8416","published":"2018-11-14T01:00:00Z","modified":"2024-08-05T06:54:36Z","title":"A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka \".NET Core Tampering…","vendor":"Microsoft","product":".NET Core","tier":"tail","description":{"text":"A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka \".NET Core Tampering Vulnerability.\" This affects .NET Core 2.1.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.07258,"percentile":0.94301,"provenance":"source"},"cwes":[],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8416","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/105798","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3676","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securitytracker.com/id/1042128","tags":["vdb-entry","x_refsource_SECTRACK"]}],"priority":{"score":18.9,"factors":[{"name":"EPSS percentile","points":18.86}]},"vendorSlug":"microsoft","affectedVersions":[{"vendor":"Microsoft","product":".NET Core","versions":["2.1"]}],"affected":[{"ecosystem":"NuGet","package":"Microsoft.NETCore.App","vulnerableRanges":[">=2.1.0, <2.1.7"],"patched":["2.1.7"],"from":["GHSA-5633-f33j-c6f7"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2505","exploited":false,"provenance":"source"}}