CVE-2018-8409

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
MicrosoftSystem.IO.PipelinesSystem.IO.Pipelines
Microsoft.NET Core2.1
MicrosoftASP.NET Core2.1

References

Timeline

Published
Sep 13, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-84107.8An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows RegisCVE-2018-84117.8An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affCVE-2018-84127.8An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before eCVE-2018-84137.8A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote CodeCVE-2018-84148.8A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code ExCVE-2018-84157.8A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering VuCVE-2018-84166.5A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This afCVE-2018-84175.3A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard, aka "Microsoft JScrCVE-2018-84195.5An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel InCVE-2018-84208.8A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote CodeCVE-2018-84219.8A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framework Remote Code ExecutCVE-2018-84226.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows
CVE-2018-8409: High severity, CVSS 7.5 | Vulnix