CVE-2023-21538

CWE-502 — Deserialization of Untrusted DataCWE-121 — Stack-based Buffer Overflow6 documents6 sources
Severity
7.5HIGH
No vector
EPSS
0.9%
top 25.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft .net 6.0Microsoft Powershell 7.2
Timeline
PublishedJan 10

Description

.NET Denial of Service Vulnerability .NET Denial of Service Vulnerability

Affected Packages14 packages

▶CVEListV5microsoft/.net_6.06.0.0 — 6.0.13
▶CVEListV5microsoft/powershell_7.27.2.0 — 7.2.9

🔴Vulnerability Details

3
OSV
.NET Denial of Service Vulnerability↗2023-01-10
▶
CVEList
.NET Denial of Service Vulnerability↗2023-01-10
▶
GHSA
.NET Denial of Service Vulnerability↗2023-01-10
▶

📋Vendor Advisories

3
Ubuntu
.NET 6 vulnerability↗2023-01-10
▶
Microsoft
.NET Denial of Service Vulnerability↗2023-01-10
▶
Red Hat
dotnet: Parsing an empty HTTP response as a JSON.NET JObject causes a stack overflow and crashes a process↗2023-01-10
▶
CVE-2023-21538 (HIGH CVSS 7.5) | .NET Denial of Service Vulnerabilit | cvebase.io