CVE-2023-38180
published 2023-08-08CVE-2023-38180: .NET and Visual Studio Denial of Service Vulnerability
high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
KEVITW
CISA Known Exploited Vulnerabilitydue 2023-08-30
Exploited in the wild
.NET and Visual Studio Denial of Service Vulnerability
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| microsoft | asp.net_core | >= 2.1 < 2.1.40 | 2.1.40 |
| microsoft | asp.net_core_2.1 | >= 2.0 < 2.1.40 | 2.1.40 |
| microsoft | microsoft.aspnetcore.app.runtime.win-arm64 | >= 6.0.0 < 6.0.21 | 6.0.21 |
| microsoft | microsoft.aspnetcore.app.runtime.win-arm64 | >= 7.0.0 < 7.0.10 | 7.0.10 |
| microsoft | microsoft.aspnetcore.app.runtime.win-x64 | >= 6.0.0 < 6.0.21 | 6.0.21 |
| microsoft | microsoft.aspnetcore.app.runtime.win-x64 | >= 7.0.0 < 7.0.10 | 7.0.10 |
| microsoft | microsoft.aspnetcore.app.runtime.win-x86 | >= 6.0.0 < 6.0.21 | 6.0.21 |
| microsoft | microsoft.aspnetcore.app.runtime.win-x86 | >= 7.0.0 < 7.0.10 | 7.0.10 |
| microsoft | microsoft_visual_studio_2022_version_17.2 | >= 17.2.0 < 17.2.18 | 17.2.18 |
| microsoft | microsoft_visual_studio_2022_version_17.4 | >= 17.4.0 < 17.4.10 | 17.4.10 |
| microsoft | microsoft_visual_studio_2022_version_17.6 | >= 17.6.0 < 17.6.6 | 17.6.6 |
| microsoft | net | >= 6.0.0 < 6.0.21 | 6.0.21 |
| microsoft | net | >= 7.0.0 < 7.0.10 | 7.0.10 |
| microsoft | net_6.0 | >= 6.0.0 < 6.0.21 | 6.0.21 |
| microsoft | net_7.0 | >= 7.0.0 < 7.0.10 | 7.0.10 |
| microsoft | visual_studio_2022 | >= 17.2.0 < 17.2.18 | 17.2.18 |
| microsoft | visual_studio_2022 | >= 17.4.0 < 17.4.10 | 17.4.10 |
| microsoft | visual_studio_2022 | >= 17.6.0 < 17.6.6 | 17.6.6 |
| msrc | asp.net_core_2.1 | — | — |
| msrc | microsoft_visual_studio_2022_version_17.2 | — | — |
| msrc | microsoft_visual_studio_2022_version_17.4 | — | — |
| msrc | microsoft_visual_studio_2022_version_17.6 | — | — |
| msrc | net_6.0 | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ghsa7.5HIGH
osv7.8HIGH
vulncheck7.5HIGH
cisa7.5HIGH