CVE-2017-11770
.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka ".NET CORE Denial Of Service Vulnerability".
| Software | From | Fixed in |
|---|---|---|
| microsoft / aspnetcore | 1.0 | 1.0.x |
| microsoft / aspnetcore | 1.1 | 1.1.x |
| microsoft / aspnetcore | 2.0 | 2.0.x |
System.Security.Cryptography.X509Certificates
|
4.0.0 | 4.1.2 |
|
Microsoft.NETCore.App
|
1.0.0 | 2.0.3 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime