Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2023-36799

.NET Core and Visual Studio Denial of Service Vulnerability

VectorNETWORK

PublishedSep 12, 2023, 17:15

Published Bysecure@microsoft.com

Base Score

6.5

Affected Versions

Package (Ecosystem)	Introduced	Fixed	Limit
Microsoft.NETCore.App.Runtime.linux-arm64(NuGet)	7.0.0	7.0.11	N/A
Microsoft.NETCore.App.Runtime.linux-musl-arm64(NuGet)	7.0.0	7.0.11	N/A
Microsoft.NETCore.App.Runtime.linux-arm(NuGet)	7.0.0	7.0.11	N/A
Microsoft.NETCore.App.Runtime.linux-musl-arm(NuGet)	7.0.0	7.0.11	N/A
Microsoft.NETCore.App.Runtime.linux-musl-x64(NuGet)	7.0.0	7.0.11	N/A
Microsoft.NETCore.App.Runtime.linux-x64(NuGet)	7.0.0	7.0.11	N/A
Microsoft.NETCore.App.Runtime.linux-x64(NuGet)	6.0.0	6.0.22	N/A
Microsoft.NETCore.App.Runtime.linux-musl-x64(NuGet)	6.0.0	6.0.22	N/A
Microsoft.NETCore.App.Runtime.linux-musl-arm(NuGet)	6.0.0	6.0.22	N/A
Microsoft.NETCore.App.Runtime.linux-arm(NuGet)	6.0.0	6.0.22	N/A
Microsoft.NETCore.App.Runtime.linux-arm64(NuGet)	6.0.0	6.0.22	N/A
Microsoft.NETCore.App.Runtime.linux-musl-arm64(NuGet)	6.0.0	6.0.22	N/A

References

Weakness Type

NVD-CWE-noinfo

CVSS Metrics

Base Score	6.5
Vector String	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Severity	Medium
Version	3.1
Attack Vector (AV)	NETWORK