Search for vulnerabilities
Vulnerability details: VCID-kqu6-94cz-aaaq
Vulnerability ID VCID-kqu6-94cz-aaaq
Aliases CVE-2018-0875
GHSA-xcvr-qv8h-m7xw
Summary Uncontrolled Resource Consumption .NET Core, .NET Core, NET Core and PowerShell Core allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability".
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
rhas Low https://access.redhat.com/errata/RHSA-2018:0522
cvssv3 3.7 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0875.json
epss 0.00448 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00448 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00448 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00448 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00448 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00448 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00448 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00448 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00448 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00448 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00448 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00448 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00622 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00622 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00622 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.00622 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.13893 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
epss 0.37022 https://api.first.org/data/v1/epss?cve=CVE-2018-0875
rhbs low https://bugzilla.redhat.com/show_bug.cgi?id=1552060
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-xcvr-qv8h-m7xw
cvssv3.1 7.5 https://github.com/dotnet/announcements/issues/62
generic_textual HIGH https://github.com/dotnet/announcements/issues/62
cvssv2 5.0 https://nvd.nist.gov/vuln/detail/CVE-2018-0875
cvssv3 7.5 https://nvd.nist.gov/vuln/detail/CVE-2018-0875
cvssv3.1 7.5 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0875
generic_textual HIGH https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0875
cvssv3.1 7.5 http://www.securityfocus.com/bid/103225
generic_textual HIGH http://www.securityfocus.com/bid/103225
cvssv3.1 7.5 http://www.securitytracker.com/id/1040505
generic_textual HIGH http://www.securitytracker.com/id/1040505
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0875.json
https://api.first.org/data/v1/epss?cve=CVE-2018-0875
https://github.com/dotnet/announcements/issues/62
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0875
http://www.securityfocus.com/bid/103225
http://www.securitytracker.com/id/1040505
1552060 https://bugzilla.redhat.com/show_bug.cgi?id=1552060
cpe:2.3:a:microsoft:asp.net_core:1.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:microsoft:asp.net_core:1.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:asp.net_core:1.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:microsoft:asp.net_core:1.1:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:asp.net_core:2.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:microsoft:asp.net_core:2.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:powershell_core:6.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:microsoft:powershell_core:6.0:*:*:*:*:*:*:*
CVE-2018-0875 https://nvd.nist.gov/vuln/detail/CVE-2018-0875
GHSA-xcvr-qv8h-m7xw https://github.com/advisories/GHSA-xcvr-qv8h-m7xw
RHSA-2018:0522 https://access.redhat.com/errata/RHSA-2018:0522
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0875.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/dotnet/announcements/issues/62
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2018-0875
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2018-0875
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0875
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at http://www.securityfocus.com/bid/103225
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at http://www.securitytracker.com/id/1040505
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.75541
EPSS Score 0.00448
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.