CVE-2023-38180

HIGH7.5⚠ KEVEPSS 0.88%

.NET and Visual Studio Denial of Service Vulnerability

發布日:2023/8/9修改日:2025/10/22加入 CISA KEV 日:2023/8/9

也稱為:GHSA-vmch-3w2x-vhgqBIT-aspnet-core-2023-38180BIT-dotnet-2023-38180BIT-dotnet-sdk-2023-38180

描述

.NET and Visual Studio Denial of Service Vulnerability

受影響套件(8)

Bitnami/aspnet-core>= 2.1.0, < 2.1.40
Bitnami/dotnet>= 6.0.0, < 6.0.21, >= 7.0.0, < 7.0.10
Bitnami/dotnet-sdk>= 6.0.0, < 6.0.21, >= 7.0.0, < 7.0.10
NuGet/Microsoft.AspNetCore.App.Runtime.win-arm64>= 7.0.0, < 7.0.10
NuGet/Microsoft.AspNetCore.App.Runtime.win-x64>= 7.0.0, < 7.0.10
NuGet/Microsoft.AspNetCore.App.Runtime.win-x86>= 7.0.0, < 7.0.10
NuGet/Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv>= 6.0.0, < 6.0.21
NuGet/Microsoft.AspNetCore.Server.Kestrel.Transport.Socketsfrom 0, < 2.1.40

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H

參考連結(10)