Base Score

MEDIUM6.5

CVE-2023-36799

.NET Core and Visual Studio Denial of Service Vulnerability

VectorNETWORK

Published Bysecure@microsoft.com

Published DateSep 12, 2023, 17:15

Affected Versions(12)

Microsoft.NETCore.App.Runtime.linux-arm64(NuGet)

Introduced7.0.0

Fixed7.0.11

LimitN/A

Microsoft.NETCore.App.Runtime.linux-musl-arm64(NuGet)

Introduced7.0.0

Fixed7.0.11

LimitN/A

Microsoft.NETCore.App.Runtime.linux-arm(NuGet)

Introduced7.0.0

Fixed7.0.11

LimitN/A

Microsoft.NETCore.App.Runtime.linux-musl-arm(NuGet)

Introduced7.0.0

Fixed7.0.11

LimitN/A

Microsoft.NETCore.App.Runtime.linux-musl-x64(NuGet)

Introduced7.0.0

Fixed7.0.11

LimitN/A

Microsoft.NETCore.App.Runtime.linux-x64(NuGet)

Introduced7.0.0

Fixed7.0.11

LimitN/A

Microsoft.NETCore.App.Runtime.linux-x64(NuGet)

Introduced6.0.0

Fixed6.0.22

LimitN/A

Microsoft.NETCore.App.Runtime.linux-musl-x64(NuGet)

Introduced6.0.0

Fixed6.0.22

LimitN/A

Microsoft.NETCore.App.Runtime.linux-musl-arm(NuGet)

Introduced6.0.0

Fixed6.0.22

LimitN/A

Microsoft.NETCore.App.Runtime.linux-arm(NuGet)

Introduced6.0.0

Fixed6.0.22

LimitN/A

Microsoft.NETCore.App.Runtime.linux-arm64(NuGet)

Introduced6.0.0

Fixed6.0.22

LimitN/A

Microsoft.NETCore.App.Runtime.linux-musl-arm64(NuGet)

Introduced6.0.0

Fixed6.0.22

LimitN/A

Package (Ecosystem)	Introduced	Fixed	Limit
Microsoft.NETCore.App.Runtime.linux-arm64(NuGet)	7.0.0	7.0.11	N/A
Microsoft.NETCore.App.Runtime.linux-musl-arm64(NuGet)	7.0.0	7.0.11	N/A
Microsoft.NETCore.App.Runtime.linux-arm(NuGet)	7.0.0	7.0.11	N/A
Microsoft.NETCore.App.Runtime.linux-musl-arm(NuGet)	7.0.0	7.0.11	N/A
Microsoft.NETCore.App.Runtime.linux-musl-x64(NuGet)	7.0.0	7.0.11	N/A
Microsoft.NETCore.App.Runtime.linux-x64(NuGet)	7.0.0	7.0.11	N/A
Microsoft.NETCore.App.Runtime.linux-x64(NuGet)	6.0.0	6.0.22	N/A
Microsoft.NETCore.App.Runtime.linux-musl-x64(NuGet)	6.0.0	6.0.22	N/A
Microsoft.NETCore.App.Runtime.linux-musl-arm(NuGet)	6.0.0	6.0.22	N/A
Microsoft.NETCore.App.Runtime.linux-arm(NuGet)	6.0.0	6.0.22	N/A
Microsoft.NETCore.App.Runtime.linux-arm64(NuGet)	6.0.0	6.0.22	N/A
Microsoft.NETCore.App.Runtime.linux-musl-arm64(NuGet)	6.0.0	6.0.22	N/A

Weakness Type (CWE):NVD-CWE-noinfo

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

HIGH

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36799

Base Score

MEDIUM6.5

Weakness Type (CWE):NVD-CWE-noinfo

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

HIGH

Package (Ecosystem)

Introduced

Fixed

Limit

Microsoft.NETCore.App.Runtime.linux-arm64(NuGet)

7.0.0

7.0.11

N/A

Microsoft.NETCore.App.Runtime.linux-musl-arm64(NuGet)

7.0.0

7.0.11

N/A

Microsoft.NETCore.App.Runtime.linux-arm(NuGet)

7.0.0

7.0.11

N/A

Microsoft.NETCore.App.Runtime.linux-musl-arm(NuGet)

7.0.0

7.0.11

N/A

Microsoft.NETCore.App.Runtime.linux-musl-x64(NuGet)

7.0.0

7.0.11

N/A

Microsoft.NETCore.App.Runtime.linux-x64(NuGet)

7.0.0

7.0.11

N/A

Microsoft.NETCore.App.Runtime.linux-x64(NuGet)

6.0.0

6.0.22

N/A

Microsoft.NETCore.App.Runtime.linux-musl-x64(NuGet)

6.0.0

6.0.22

N/A

Microsoft.NETCore.App.Runtime.linux-musl-arm(NuGet)

6.0.0

6.0.22

N/A

Microsoft.NETCore.App.Runtime.linux-arm(NuGet)

6.0.0

6.0.22

N/A

Microsoft.NETCore.App.Runtime.linux-arm64(NuGet)

6.0.0

6.0.22

N/A

Microsoft.NETCore.App.Runtime.linux-musl-arm64(NuGet)

6.0.0

6.0.22

N/A