René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":" Discussion: Microsoft Security Advisory CVE-2018-0875: Hash Collision can cause Denial of Service","articleBody":"# Microsoft Security Advisory CVE-2018-0875: Hash Collision can cause Denial of Service\r\n\r\n## Executive Summary\r\n\r\nMicrosoft is releasing this security advisory to provide information about a vulnerability in the open source versions of PowerShell Core.\r\nThis advisory also provides guidance on what developers can do to update their scripts and module correctly.\r\n\r\nMicrosoft is aware of a security vulnerability in the public versions of .NET Core where a malicious file\r\nor web request could cause a denial of service (DoS) attack.\r\n\r\nSystem administrators are advised to update PowerShell Core to version 6.0.2.\r\nThis version will also address CVE-2018-0786.\r\n\r\n## Affected Software\r\n\r\nThe vulnerability affects PowerShell Core prior to version `6.0.2`\r\n\r\n## Advisory FAQ\r\n\r\n### How do I know if I am affected?\r\n\r\nIf all of the following are true:\r\n\r\n1. Run `pwsh -v` (if, you cannot launch PowerShell Core using `pwsh` you are affected).\r\n  If the reported version starts with `6.0.1`, you are affected.\r\n\r\n### How do I update to an unaffected version?\r\n\r\nFollow the instructions at [Get PowerShell](https://github.com/PowerShell/PowerShell#get-powershell)\r\nto install the latest version of PowerShell Core.\r\n\r\n## Other Information\r\n\r\n### Reporting Security Issues\r\n\r\nIf you have found a potential security issue in PowerShell Core,\r\nplease email details to secure@microsoft.com.\r\n\r\n### Support\r\n\r\nYou can ask questions about this issue on GitHub in the PowerShell organization.\r\nThis is located at https://github.com/PowerShell/.\r\nThe Announcements repo (https://github.com/PowerShell/Announcements)\r\nwill contain this bulletin as an issue and will include a link to a discussion issue where you can ask questions.\r\n\r\n### What if the update breaks my script or module?\r\n\r\nYou can uninstall the newer version of PowerShell Core and install the previous version of PowerShell Core.\r\nThis should be treated as a temporary measure.\r\nTherefore, the script or module should be updated to work with the patched version of PowerShell Core.\r\n\r\n### Acknowledgments\r\n\r\n[Ben Adams](https://twitter.com/ben_a_adams) of [Illyriad Games](https://www.illyriad.co.uk/)\r\n\r\n### External Links\r\n\r\n[CVE-2018-0875](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0875)\r\n\r\n### Revisions\r\n\r\nV1.0 (Mar 15, 2018): Advisory published.\r\n\r\n*Version 1.0*\r\n*Last Updated 2018-03-15*","author":{"url":"https://github.com/TravisEz13","@type":"Person","name":"TravisEz13"},"datePublished":"2018-03-15T17:54:02.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":3},"url":"https://github.com/6401/PowerShell/issues/6401"}