CVEvulnerability

CVE-2023-38180

7.5 HIGH Known exploited Published 2023-08-08 Modified 2026-08-10 Official page ↗

CISA Known Exploited Vulnerability

Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability — Microsoft .NET Core and Visual Studio

Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).

Added to KEV
2023-08-09
Remediation due
2023-08-30
Ransomware use
Unknown
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-38180; https://nvd.nist.gov/vuln/detail/CVE-2023-38180
Status
Analyzed
Published
2023-08-08
Last modified
2026-08-10
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400

Description

.NET and Visual Studio Denial of Service Vulnerability

Affected configurations

• microsoft .net (>= 6.0.0 < 6.0.21) • microsoft .net (>= 7.0.0 < 7.0.10) • microsoft asp.net core (>= 2.1 < 2.1.40) • microsoft visual studio 2022 (>= 17.2.0 < 17.2.18) • microsoft visual studio 2022 (>= 17.4.0 < 17.4.10) • microsoft visual studio 2022 (>= 17.6.0 < 17.6.6) • fedoraproject fedora 37 • fedoraproject fedora 38

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References