CVE-2017-11770
CVE-2017-11770
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 5.4%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
15 Nov 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka ".NET CORE Denial Of Service Vulnerability".
Affected products
Microsoft Corporation · .NET CoreWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →