High 1 exploited CVE MSRC-CVE-2023-38180 1 CVE

.NET and Visual Studio Denial of Service Vulnerability

Published Aug 8, 2023 · Updated Aug 11, 2023 · Revision 2

Vendor: Microsoft

Summary

Impact: Denial of Service. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

Details

Security updates
2.1.40 — https://github.com/dotnet/announcements/issues/269
6.0.21 — https://support.microsoft.com/help/5029688
7.0.10 — https://support.microsoft.com/help/5029689
17.2.18 — https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes
17.4.10 — https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes

Vulnerabilities 1

High 7.5

CVE-2023-38180 Exploited EPSS 14%

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.2 Ubuntu Alpine NuGet

Aug 8, 2023
KEV Aug 9, 2023

Revision history

2023-08-11 #2
Updated CVE to correct exploit status. This is an informational update only.
2023-08-08 #1
Information published.

References

CVE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss