CVE-2023-36799

CWE-400 — Uncontrolled Resource Consumption14 documents7 sources
Severity
6.5MEDIUM
EPSS
1.1%
top 21.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Microsoft .net 6.0Microsoft .net 7.0Microsoft Microsoft Visual Studio 2022 Version 17.2+7 more
Timeline
PublishedSep 12
Latest updateOct 25

Description

.NET Core and Visual Studio Denial of Service Vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages18 packages

▶NVDmicrosoft/visual_studio_202217.2 — 17.2.19+3

Patches

Patch: msrc.microsoft.com ↗Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

7
OSV
.Net regressions↗2023-10-25
▶
OSV
.Net regressions↗2023-10-25
▶
OSV
dotnet6, dotnet7 vulnerabilities↗2023-10-19
▶
OSV
Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability↗2023-09-12
▶
CVEList
.NET Core and Visual Studio Denial of Service Vulnerability↗2023-09-12
▶

📋Vendor Advisories

6
Ubuntu
.Net regressions↗2023-10-25
▶
Ubuntu
.Net regressions↗2023-10-25
▶
Ubuntu
.NET vulnerabilities↗2023-10-19
▶
Red Hat
dotnet: Denial of Service with Client Certificates using .NET Kestrel↗2023-09-13
▶
Ubuntu
.NET vulnerability↗2023-09-12
▶
CVE-2023-36799 (MEDIUM CVSS 6.5) | .NET Core and Visual Studio Denial | cvebase.io