High MSRC-CVE-2023-21538 1 CVE

.NET Denial of Service Vulnerability

Published Jan 10, 2023 · Updated Jan 25, 2023 · Revision 2

Vendor: Microsoft

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

Details

Security updates
6.0.13 — https://support.microsoft.com/help/5022546
7.2.9 — https://github.com/PowerShell/Announcements/issues/36

Vulnerabilities 1

High 7.5

CVE-2023-21538

.NET Denial of Service Vulnerability

.NET Denial of Service Vulnerability

Microsoft .NET 6.0 PowerShell 7.2 dotnet6 Ubuntu Alpine NuGet

Jan 10, 2023

Revision history

2023-01-25 #2
Revised the Security Updates table to include PowerShell 7.2 because this version of PowerShell 7 is affected by this vulnerability. See [https://github.com/PowerShell/Announcements/issues/36](https://github.com/PowerShell/Announcements/issues/36) for more information.
2023-01-10 #1
Information published.

References

CVE-2023-21538 .NET Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21538
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss