Skip to main content
← All vulnerabilities
CVE-2023-29331GHSA-555C-2P6R-68MMBIT-DOTNET-2023-29331BIT-DOTNET-SDK-2023-29331

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.0.18, 7.0.7, 17.0.22, 17.2.16, 17.4.8, and 13 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Microsoft .NET 6.0

    From 6.0.0 · fixed in 6.0.18

  • Microsoft .NET 7.0

    From 7.0.0 · fixed in 7.0.7

  • Microsoft Microsoft Visual Studio 2022 version 17.0

    From 17.0.0 · fixed in 17.0.22

  • Microsoft Microsoft Visual Studio 2022 version 17.2

    From 17.2.0 · fixed in 17.2.16

  • Microsoft Microsoft Visual Studio 2022 version 17.4

    From 17.4.0 · fixed in 17.4.8

  • Microsoft Microsoft Visual Studio 2022 version 17.6

    From 17.6.0 · fixed in 17.6.3

  • Microsoft PowerShell 7.2

    From 7.2.0 · fixed in 7.2.12

  • Microsoft PowerShell 7.3

    From 7.3.0 · fixed in 7.3.5

  • Microsoft Microsoft .NET Framework 4.8

    From 4.8.0 · fixed in 4.8.4644.0

  • Microsoft Microsoft .NET Framework 3.5 AND 4.8

    From 4.8.0 · fixed in 4.8.4644.0

  • Microsoft Microsoft .NET Framework 3.5 AND 4.7.2

    From 4.7.0 · fixed in 4.7.4050.0

  • Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2

    From 3.0.0.0 · fixed in 10.0.14393.5989

  • Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2

    From 4.7.0 · fixed in 4.7.04043.0

  • Microsoft Microsoft .NET Framework 3.5 AND 4.8.1

    From 4.8.1 · fixed in 4.8.9166.0

  • Microsoft Microsoft .NET Framework 4.6.2

    From 4.7.0 · fixed in 4.7.04043.0

  • Microsoft Microsoft .NET Framework 3.5 and 4.6.2

    From 4.7.0 · fixed in 10.0.10240.19983

  • Microsoft Microsoft .NET Framework 2.0 Service Pack 2

    Version range not reported

  • Microsoft Microsoft .NET Framework 3.0 Service Pack 2

    Version range not reported

  • Microsoft Microsoft .NET Framework 3.5

    Version range not reported

  • Microsoft Microsoft .NET Framework 3.5.1

    Version range not reported

  • Microsoft.Windows.CompatibilityNuGet

    From 7.0.0 · fixed in 7.0.3

  • Microsoft.Windows.CompatibilityNuGet

    From 6.0.0 · fixed in 6.0.6

  • System.Security.Cryptography.PkcsNuGet

    From 7.0.0 · fixed in 7.0.2

  • System.Security.Cryptography.PkcsNuGet

    From 6.0.0 · fixed in 6.0.3

  • Microsoft.NETCore.App.Runtime.linux-armNuGet

    From 7.0.0 · fixed in 7.0.7

  • Microsoft.NETCore.App.Runtime.linux-armNuGet

    From 6.0.0 · fixed in 6.0.18

  • Microsoft.NETCore.App.Runtime.linux-arm64NuGet

    From 6.0.0 · fixed in 6.0.18

  • Microsoft.NETCore.App.Runtime.linux-arm64NuGet

    From 7.0.0 · fixed in 7.0.7

  • Microsoft.NETCore.App.Runtime.linux-musl-armNuGet

    From 7.0.0 · fixed in 7.0.7

  • Microsoft.NETCore.App.Runtime.linux-musl-armNuGet

    From 6.0.0 · fixed in 6.0.18

  • Microsoft.NETCore.App.Runtime.linux-musl-arm64NuGet

    From 7.0.0 · fixed in 7.0.7

  • Microsoft.NETCore.App.Runtime.linux-musl-arm64NuGet

    From 6.0.0 · fixed in 6.0.18

  • Microsoft.NETCore.App.Runtime.linux-musl-x64NuGet

    From 6.0.0 · fixed in 6.0.18

  • Microsoft.NETCore.App.Runtime.linux-musl-x64NuGet

    From 7.0.0 · fixed in 7.0.7

  • Microsoft.NETCore.App.Runtime.linux-x64NuGet

    From 6.0.0 · fixed in 6.0.18

  • Microsoft.NETCore.App.Runtime.linux-x64NuGet

    From 7.0.0 · fixed in 7.0.7

  • Microsoft.NETCore.App.Runtime.osx-arm64NuGet

    From 6.0.0 · fixed in 6.0.18

  • Microsoft.NETCore.App.Runtime.osx-arm64NuGet

    From 7.0.0 · fixed in 7.0.7

  • Microsoft.NETCore.App.Runtime.osx-x64NuGet

    From 6.0.0 · fixed in 6.0.18

  • Microsoft.NETCore.App.Runtime.osx-x64NuGet

    From 7.0.0 · fixed in 7.0.7

  • Microsoft.NETCore.App.Runtime.win-armNuGet

    From 6.0.0 · fixed in 6.0.18

  • Microsoft.NETCore.App.Runtime.win-armNuGet

    From 7.0.0 · fixed in 7.0.7

  • Microsoft.NETCore.App.Runtime.win-arm64NuGet

    From 6.0.0 · fixed in 6.0.18

  • Microsoft.NETCore.App.Runtime.win-arm64NuGet

    From 7.0.0 · fixed in 7.0.7

  • Microsoft.NETCore.App.Runtime.win-x64NuGet

    From 6.0.0 · fixed in 6.0.18

  • Microsoft.NETCore.App.Runtime.win-x64NuGet

    From 7.0.0 · fixed in 7.0.7

  • Microsoft.NETCore.App.Runtime.win-x86NuGet

    From 7.0.0 · fixed in 7.0.7

  • Microsoft.NETCore.App.Runtime.win-x86NuGet

    From 6.0.0 · fixed in 6.0.18

References 1

msrc.microsoft.com