CVE-2014-4072 in .NET Framework

Résumé

par MITRE

Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly use a hash table for request data, which allows remote attackers to cause a denial of service (resource consumption and ASP.NET performance degradation) via crafted requests, aka ".NET Framework Denial of Service Vulnerability."

Be aware that VulDB is the high quality source for vulnerability data.

• Réserver: 12/06/2014
• Divulgation: 09/09/2014
• Modérer: accepté
• Entrée: VDB-67514
• CPE: prêt
• CWE: CWE-399 (confirmé)
• CVSS: 5.0 (NVD)
• EPSS: 0.30942
• KEV: non
• Activités: très faible
• Secteur: Finance, Education, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-4072
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-4072
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-4072/