p PatchFirst

CVE-2023-38180

CVE-2023-38180 · .NET and Visual Studio Denial of Service Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

.NET and Visual Studio Denial of Service Vulnerability

CVSS 7.5 · High · EPSS 14.1% · In KEV · Fix available

Published
Updated

Stack: system

Affected products and versions

  • .net 6.0

    Versions
    • ≥ 6.0.0, < 6.0.21: Affected (custom)

    Update to 6.0.21

  • .net 7.0

    Versions
    • ≥ 7.0.0, < 7.0.10: Affected (custom)

    Update to 7.0.10

  • asp.net core 2.1

    Versions
    • ≥ 2.0, < 2.1.40: Affected (custom)

    Update to 2.1.40

  • microsoft visual studio 2022 version 17.2

    Versions
    • ≥ 17.2.0, < 17.2.18: Affected (custom)

    Update to 17.2.18

  • microsoft visual studio 2022 version 17.4

    Versions
    • ≥ 17.4.0, < 17.4.10: Affected (custom)

    Update to 17.4.10

  • microsoft visual studio 2022 version 17.6

    Versions
    • ≥ 17.6.0, < 17.6.6: Affected (custom)

    Update to 17.6.6

  • dotnet6 Ubuntu:22.04:LTS

    Versions
    • 6.0.108-0ubuntu1~22.04.1
    • 6.0.109-0ubuntu1~22.04.1
    • 6.0.110-0ubuntu1~22.04.1
    • 6.0.111-0ubuntu1~22.04.1
    • 6.0.113-0ubuntu1~22.04.1
    • 6.0.116-0ubuntu1~22.04.1
    • 6.0.118-0ubuntu1~22.04.1
    • 6.0.119-0ubuntu1~22.04.1
    • 6.0.120-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: < 6.0.121-0ubuntu1~22.04.1

    Update to 6.0.121-0ubuntu1~22.04.1

  • dotnet7 Ubuntu:22.04:LTS

    Versions
    • 7.0.105-0ubuntu1~22.04.1
    • 7.0.107-0ubuntu1~22.04.1
    • 7.0.108-0ubuntu1~22.04.1
    • 7.0.109-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: < 7.0.110-0ubuntu1~22.04.1

    Update to 7.0.110-0ubuntu1~22.04.1

Original sources

Check your server →