高危
Microsoft .NET和Visual Studio拒绝服务漏洞
2023-08-08 17:36:06 公开 ，2026-08-10 16:50:43 更新
- 关键漏洞
- CISA KEV
- 远程
- 无需认证
- 开源组件漏洞
- CWE Top 25 (2023)
- CWE Top 25 (2024)
- 公开PoC
- SSVC：
- 可利用状态：已被积极利用攻击自动化：是技术影响评估：部分 2024-07-25 04:42:20
风险信息
- CVSS v3 向量
- AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v3 风险值
- 7.5
- CVSS v3.1 向量
- AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
- CVSS v3.1 风险值
- 7.5
详细信息
- 漏洞类型
- 其他
- 漏洞描述
- Microsoft NET和Visual Studio易受拒绝服务攻击。通过发送特制的请求，远程攻击者可以利用此漏洞造成拒绝服务情况。漏洞影响ASP.NET Core 2.1、.NET 6.0、.NET 7.0、Visual Studio 2022 version 17.2、Visual Studio 2022 version 17.4、Visual Studio 2022 version 17.6。
- 修复建议
- 使用Microsoft自动更新为您的系统应用适当的修补程序，或使用Microsoft安全更新指南搜索可用的修补程序： https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180
参考链接
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180
OSV · vendor-advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CL2L4WE5QRT7WEXANYXSKSU43APC5N2V/
OSV · Release Notes · Mailing List
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWVZFKTLNMNKPZ755EMRYIA6GHFOWGKY/
OSV · Release Notes · Mailing List
- https://github.com/dotnet/runtime/security/advisories/GHSA-vmch-3w2x-vhgq
OSV
- https://nvd.nist.gov/vuln/detail/CVE-2023-38180
OSV
- https://github.com/dotnet/runtime/issues/90170
OSV
- https://github.com/advisories/GHSA-vmch-3w2x-vhgq
GitHub
- https://osv.dev/vulnerability/BIT-dotnet-sdk-2023-38180
OSV
- https://osv.dev/vulnerability/BIT-dotnet-2023-38180
OSV
- https://osv.dev/vulnerability/BIT-aspnet-core-2023-38180
OSV
- https://errata.rockylinux.org/RLSA-2023:4643
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2228621
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2228622
OSV
- https://osv.dev/vulnerability/RLSA-2023:4643
OSV
- https://errata.rockylinux.org/RLSA-2023:4645
OSV
- https://osv.dev/vulnerability/RLSA-2023:4645
OSV
- https://access.redhat.com/errata/RHSA-2023:4643
OSV
- https://access.redhat.com/security/cve/CVE-2023-35390
OSV
- https://access.redhat.com/security/cve/CVE-2023-38180
OSV
- https://bugzilla.redhat.com/2228621
OSV
- https://bugzilla.redhat.com/2228622
OSV
- https://errata.almalinux.org/8/ALSA-2023-4643.html
OSV
- https://osv.dev/vulnerability/ALSA-2023:4643
OSV
- https://access.redhat.com/errata/RHSA-2023:4644
OSV
- https://errata.almalinux.org/9/ALSA-2023-4644.html
OSV
- https://osv.dev/vulnerability/ALSA-2023:4644
OSV
- https://access.redhat.com/errata/RHSA-2023:4645
OSV
- https://errata.almalinux.org/8/ALSA-2023-4645.html
OSV
- https://osv.dev/vulnerability/ALSA-2023:4645
OSV
- https://access.redhat.com/errata/RHSA-2023:4642
OSV
- https://errata.almalinux.org/9/ALSA-2023-4642.html
OSV
- https://osv.dev/vulnerability/ALSA-2023:4642
OSV
- https://github.com/dotnet/runtime
OSV
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CL2L4WE5QRT7WEXANYXSKSU43APC5N2V
OSV · Release Notes · Mailing List
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWVZFKTLNMNKPZ755EMRYIA6GHFOWGKY
OSV · Release Notes · Mailing List
- https://osv.dev/vulnerability/GHSA-vmch-3w2x-vhgq
OSV
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-04
- https://github.com/dotnet/announcements/issues/269
Snyk
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Snyk
- https://ubuntu.com/security/CVE-2023-38180
OSV
- https://devblogs.microsoft.com/dotnet/august-2023-updates/
OSV
- https://ubuntu.com/security/notices/USN-6278-1
OSV
- https://ubuntu.com/security/notices/USN-6278-2
OSV
- https://www.cve.org/CVERecord?id=CVE-2023-38180
OSV
- https://osv.dev/vulnerability/UBUNTU-CVE-2023-38180
OSV
- https://osv.dev/vulnerability/CVE-2023-38180
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38180
OSV · US Government Resource