Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Aug 8, 2023 · Catalog

   Detected

   Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).

2. Aug 9, 2023 · CISA KEV

   Known exploited

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

3. Aug 30, 2023 · CISA KEV

   Remediation due

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

4. Aug 10, 2026 · Catalog

   Updated

   Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).

Affected

• cpe fedoraproject/fedora37
• cpe fedoraproject/fedora38
• cpe microsoft/.netversion unspecified
• cpe microsoft/asp.net coreversion unspecified
• cpe microsoft/visual studio 2022version unspecified
• vendor Microsoft .NET Core and Visual Studioversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2023-38180

  Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).

  cisa.gov
• CVE.orgVulnerability recordCVE-2023-38180

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2023-38180

  30-day exploitation probability 14.0%

  first.org
• NIST NVDVulnerability recordCVE-2023-38180

  .NET and Visual Studio Denial of Service Vulnerability

  nvd.nist.gov

References

• Mailing List · lists.fedoraproject.org
• Mailing List · lists.fedoraproject.org
• CISA note · msrc.microsoft.com
• Patch · msrc.microsoft.com
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov