.NET Core & .NET Framework Denial of Service Vulnerability

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• microsoft .net5.0
• microsoft .net core2.1 and later · up to 2.1.18 inclusive
• microsoft .net core3.0 and later · up to 3.1.4 inclusive
• microsoft .net core2.1
• microsoft .net core3.1
• microsoft .net framework2.0
• microsoft .net framework3.0
• microsoft .net framework3.5
• microsoft .net framework3.5.1
• microsoft .net framework4.5.2
• microsoft .net framework4.6
• microsoft .net framework4.6.1
• microsoft .net framework4.6.2
• microsoft .net framework4.7
• microsoft .net framework4.7.1
• microsoft .net framework4.7.2
• microsoft .net framework4.8
• microsoft powershell7.0
• microsoft powershell core6.2
• microsoft visual studio 201715.9

Versions reported by the vendor

Affected version ranges reported by the assigning authority (microsoft). Independent of NVD's CPE analysis and usually ahead of it.

• Microsoft .NET 5.0

  • 5.0.0 and later · before publicationaffected

• Microsoft .NET Core 2.1

  • 2.1 and later · before publicationaffected

• Microsoft .NET Core 3.1

  • 3.1 and later · before publicationaffected

• Microsoft Microsoft .NET Framework 2.0 Service Pack 2

  • 2.0.0 and later · before publicationaffected

• Microsoft Microsoft .NET Framework 3.0 Service Pack 2

  • 3.0.0 and later · before publicationaffected

• Microsoft Microsoft .NET Framework 3.5

  • 3.5.0 and later · before publicationaffected

• Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2

  • 3.0.0.0 and later · before publicationaffected

• Microsoft Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2

  • 3.5.0 and later · before publicationaffected

• Microsoft Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2

  • 3.0 and later · before publicationaffected

• Microsoft Microsoft .NET Framework 3.5 AND 4.7.2

  • 4.7.0 and later · before publicationaffected

• Microsoft Microsoft .NET Framework 3.5 AND 4.8

  • 4.8.0 and later · before publicationaffected

• Microsoft Microsoft .NET Framework 3.5.1

  • 3.5.0 and later · before publicationaffected

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2023-38180.NET and Visual Studio Denial of Service VulnerabilityKEV
  64This week
• CVE-2023-38171Microsoft QUIC Denial of Service Vulnerability
  51Plan
• CVE-2021-26701.NET Core Remote Code Execution Vulnerability
  41Plan

Published before and after this one in the same product

• Later →CVE-2021-1721Feb 25, 2021 · .NET Core and Visual Studio Denial of Service Vulnerability
  27Monitor
• Later →CVE-2021-24112Feb 25, 2021 · .NET Core Remote Code Execution Vulnerability
  33Monitor
• Later →CVE-2021-31204May 11, 2021 · .NET and Visual Studio Elevation of Privilege Vulnerability
  29Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.