High MSRC-CVE-2023-29331 1 CVE

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Published Jun 13, 2023 · Updated Jun 29, 2023 · Revision 2

Vendor: Microsoft

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Security updates
6.0.18 — https://support.microsoft.com/help/5027797
7.0.7 — https://support.microsoft.com/help/5027798
17.0.22 — https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes-v17.0
17.2.16 — https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes
17.4.8 — https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
7.2.12 — https://github.com/PowerShell/Announcements/issues/44
4.8.4644.0 — https://support.microsoft.com/help/5027541
4.8.4644.0 — https://support.microsoft.com/help/5027532
4.8.4644.0 — https://support.microsoft.com/help/5027123
4.8.4644.0 — https://support.microsoft.com/help/5027544
4.8.4644.0 — https://support.microsoft.com/help/5027536
4.8.4644.0 — https://support.microsoft.com/help/5027542
4.8.4644.0 — https://support.microsoft.com/help/5027533
4.8.4644.0 — https://support.microsoft.com/help/5027540
4.8.4644.0 — https://support.microsoft.com/help/5027531
4.8.4644.0 — https://support.microsoft.com/help/5027537
4.8.4644.0 — https://support.microsoft.com/help/5027539
4.8.4644.0 — https://support.microsoft.com/help/5027538
10.0.14393.5989 — https://support.microsoft.com/help/5027219
4.8.9166.0 — https://support.microsoft.com/help/5027119
4.7.04043.0 — https://support.microsoft.com/help/5027543
4.7.4050.0 — https://support.microsoft.com/help/5027534
10.0.10240.19983 — https://support.microsoft.com/help/5027230

Vulnerabilities 1

High 7.5

CVE-2023-29331

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Ubuntu Alpine NuGet

Jun 14, 2023

Revision history

2023-06-29 #2
Revised the Security Updates table to include PowerShell 7.2 and PowerShell 7.3 because these versions of PowerShell 7 are affected by this vulnerability. See [https://github.com/PowerShell/Announcements/issues/44](https://github.com/PowerShell/Announcements/issues/44) for more information.
2023-06-13 #1
Information published.

References

CVE-2023-29331 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29331
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss