CVE-2023-38180

Published: Aug 8, 2023
Updated: May 9, 2024
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2023-38180" target="_blank" rel="noopener"> CVE-2023-38180
GHSA: <a href="https://github.com/advisories/GHSA-vmch-3w2x-vhgq" target="_blank" rel="noopener"> GHSA-vmch-3w2x-vhgq
Severity: High
Exploit:

.NET and Visual Studio Denial of Service Vulnerability

CVSS v3:

No CWE or OWASP classifications available.

Software	From	Fixed in
Microsoft.AspNetCore.App.Runtime.win-arm64	7.0.0	7.0.10
Microsoft.AspNetCore.App.Runtime.win-x64	7.0.0	7.0.10
Microsoft.AspNetCore.App.Runtime.win-x86	7.0.0	7.0.10
microsoft / visual_studio_2022	17.2.0	17.2.18
microsoft / visual_studio_2022	17.4.0	17.4.10
microsoft / visual_studio_2022	17.6.0	17.6.6
Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv	6.0.0	6.0.21
Microsoft.AspNetCore.App.Runtime.win-arm64	6.0.0	6.0.21
Microsoft.AspNetCore.App.Runtime.win-x64	6.0.0	6.0.21
Microsoft.AspNetCore.App.Runtime.win-x86	6.0.0	6.0.21
Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv	-	2.1.40
Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets	-	2.1.40
fedoraproject / fedora	37	37.x
fedoraproject / fedora	38	38.x
microsoft / .net	6.0.0	6.0.21
microsoft / .net	7.0.0	7.0.10
microsoft / asp.net_core	2.1	2.1.40