CVE-2023-38178
Fixed in a distro release EPSS 3%CVSS 7.5
.NET Core and Visual Studio Denial of Service Vulnerability
Products: Microsoft .NET 6.0, Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| NuGet | Microsoft.AspNetCore.App.Runtime.win-arm | 7.0.10 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-arm64 | 7.0.10 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-x64 | 7.0.10 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-x86 | 7.0.10 |
| NuGet | Microsoft.NetCore.App.Runtime.win-arm | 7.0.10 |
| NuGet | Microsoft.NetCore.App.Runtime.win-arm64 | 7.0.10 |
| NuGet | Microsoft.NetCore.App.Runtime.win-x64 | 7.0.10 |
| NuGet | Microsoft.NetCore.App.Runtime.win-x86 | 7.0.10 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 22.04 LTS | dotnet6 | 6.0.121-0ubuntu1~22.04.1 |
| Ubuntu 22.04 LTS | dotnet7 | 7.0.110-0ubuntu1~22.04.1 |