CVE-2017-11770 (高 7.5) · Watchpost

← 脆弱性一覧

Improper Certificate Validation

高 7.5CVE-2017-11770 · GHSA-7mfr-774f-w5r9 · 15/11/2017 公開 · 17/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
Microsoft.NETCore.App NuGet	`≥ 1.0.0, < 2.0.3`	`2.0.3`
System.Security.Cryptography.X509Certificates NuGet	`≥ 4.0.0, < 4.1.2`	`4.1.2`
aspnetcore microsoft	`= 1.0= 1.1= 2.0`	修正版なし

概要

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka ".NET CORE Denial Of Service Vulnerability".

NVD の説明

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka ".NET CORE Denial Of Service Vulnerability".

参考情報

nvd.nist.gov/vuln/detail/CVE-2017-11770 · ADVISORY
access.redhat.com/errata/RHSA-2017:3248 · WEB
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11770 · WEB
securityfocus.com/bid/101710 · WEB
securitytracker.com/id/1039787 · WEB

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン