Not rated
CVE-2018-8356 A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate…
Description
A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, ASP.NET Core 2.0, ASP.NET Core 1.0, .NET Core 1.1, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 1.0, .NET Core 2.0, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft .NET Framework | Versions not published | |
| .NET Core | 2.0 | No fix stated |
| .NET Core | 1.1 | No fix stated |
| .NET Core | 1.0 | No fix stated |
| ASP.NET Core | 2.0 | No fix stated |
| ASP.NET Core | 1.1 | No fix stated |
| ASP.NET Core | 1.0 | No fix stated |
| .NET Framework | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 104664 www.securityfocus.com
- 1041257 www.securitytracker.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft .NET Framework
The 10 CVEs of Microsoft .NET Framework →
CVE-2019-0545
An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin…
Not rated
CVE-2018-8540
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka…
Not rated
CVE-2018-8517
A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET…
Not rated
CVE-2018-8421
A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET…
Not rated