Cloudanix VulnDB

CVE-2023-36799

Medium · 6.5

CVSS

6.5

EPSS

4.6%

Published

Sep 12, 2023

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

A problem in Microsoft's development tools and software framework lets outsiders disrupt services by sending bad requests that make programs stop working.

Exploitation
Requires User Interaction
Attacker needs
User Interaction
Complexity
Low
Impact
Denial Of Service
Component
Library
Class
Denial of service
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

The vulnerability permits remote unauthenticated attackers to trigger denial of service in .NET Core runtime or Visual Studio components through crafted network requests that cause excessive resource consumption or application crashes, affecting availability without impacting confidentiality or integrity.

Why it matters to the business

Services built on affected .NET applications may experience unexpected outages or degraded performance, leading to operational downtime and potential loss of productivity; the vulnerability has been public for over three years with low but stable exploit probability.

How an attack unfolds

An attacker sends a specially crafted HTTP request to a .NET-based service or Visual Studio instance that requires minimal user interaction, exploiting the flaw to exhaust resources and render the target unavailable.

How to fix it

Upgrade affected .NET Core and Visual Studio 2022 installations to the latest patched releases provided by Microsoft; apply all security updates promptly and test applications post-upgrade for stability.

How to confirm the fix worked

Confirm updated version strings in installed .NET SDKs and Visual Studio instances, then perform functional and load testing to ensure denial-of-service conditions are no longer reproducible.

Typical attack path

  1. Scan for publicly exposed .NET Core applications or Visual Studio instances
  2. Craft and transmit a malicious network request matching the vulnerable code path
  3. Observe service crash or resource exhaustion confirming successful denial of service

How to detect it

Review .NET application and system logs for abrupt process terminations or high CPU/memory usage spikes; correlate with incoming network traffic patterns that coincide with availability issues.

What your security team should do

  • Prioritize deployment of Microsoft security updates for .NET and Visual Studio across all environments
  • Enable application performance monitoring to detect sudden resource spikes
  • Review and harden network exposure of .NET services with rate limiting where feasible

The record

.NET Core and Visual Studio Denial of Service Vulnerability

Affected packages

Ecosystem Package Introduced Fixed
NuGet Microsoft.NETCore.App.Runtime.linux-arm 6.0.0 6.0.22
NuGet Microsoft.NETCore.App.Runtime.linux-arm 7.0.0 7.0.11
NuGet Microsoft.NETCore.App.Runtime.linux-arm64 6.0.0 6.0.22
NuGet Microsoft.NETCore.App.Runtime.linux-arm64 7.0.0 7.0.11
NuGet Microsoft.NETCore.App.Runtime.linux-musl-arm 6.0.0 6.0.22
NuGet Microsoft.NETCore.App.Runtime.linux-musl-arm 7.0.0 7.0.11
NuGet Microsoft.NETCore.App.Runtime.linux-musl-arm64 6.0.0 6.0.22
NuGet Microsoft.NETCore.App.Runtime.linux-musl-arm64 7.0.0 7.0.11
NuGet Microsoft.NETCore.App.Runtime.linux-musl-x64 6.0.0 6.0.22
NuGet Microsoft.NETCore.App.Runtime.linux-musl-x64 7.0.0 7.0.11
NuGet Microsoft.NETCore.App.Runtime.linux-x64 6.0.0 6.0.22
NuGet Microsoft.NETCore.App.Runtime.linux-x64 7.0.0 7.0.11
AlmaLinux:8 aspnetcore-runtime-6.0 0 6.0.22-1.el8_8
AlmaLinux:8 aspnetcore-runtime-6.0 0 6.0.24-1.el8_8
AlmaLinux:8 aspnetcore-runtime-7.0 0 7.0.11-1.el8_8
AlmaLinux:8 aspnetcore-runtime-7.0 0 7.0.13-1.el8_8
AlmaLinux:8 aspnetcore-targeting-pack-6.0 0 6.0.22-1.el8_8
AlmaLinux:8 aspnetcore-targeting-pack-6.0 0 6.0.24-1.el8_8
AlmaLinux:8 aspnetcore-targeting-pack-7.0 0 7.0.11-1.el8_8
AlmaLinux:8 aspnetcore-targeting-pack-7.0 0 7.0.13-1.el8_8
AlmaLinux:8 dotnet 0 7.0.111-1.el8_8
AlmaLinux:8 dotnet 0 7.0.113-1.el8_8
AlmaLinux:8 dotnet-apphost-pack-6.0 0 6.0.22-1.el8_8
AlmaLinux:8 dotnet-apphost-pack-6.0 0 6.0.24-1.el8_8
AlmaLinux:8 dotnet-apphost-pack-7.0 0 7.0.11-1.el8_8
AlmaLinux:8 dotnet-apphost-pack-7.0 0 7.0.13-1.el8_8
AlmaLinux:8 dotnet-host 0 7.0.11-1.el8_8
AlmaLinux:8 dotnet-host 0 7.0.13-1.el8_8
AlmaLinux:8 dotnet-hostfxr-6.0 0 6.0.22-1.el8_8
AlmaLinux:8 dotnet-hostfxr-6.0 0 6.0.24-1.el8_8
AlmaLinux:8 dotnet-hostfxr-7.0 0 7.0.11-1.el8_8
AlmaLinux:8 dotnet-hostfxr-7.0 0 7.0.13-1.el8_8
AlmaLinux:8 dotnet-runtime-6.0 0 6.0.22-1.el8_8
AlmaLinux:8 dotnet-runtime-6.0 0 6.0.24-1.el8_8
AlmaLinux:8 dotnet-runtime-7.0 0 7.0.11-1.el8_8
AlmaLinux:8 dotnet-runtime-7.0 0 7.0.13-1.el8_8
AlmaLinux:8 dotnet-sdk-6.0 0 6.0.122-1.el8_8
AlmaLinux:8 dotnet-sdk-6.0 0 6.0.124-1.el8_8
AlmaLinux:8 dotnet-sdk-6.0-source-built-artifacts 0 6.0.122-1.el8_8
AlmaLinux:8 dotnet-sdk-6.0-source-built-artifacts 0 6.0.124-1.el8_8
AlmaLinux:8 dotnet-sdk-7.0 0 7.0.111-1.el8_8
AlmaLinux:8 dotnet-sdk-7.0 0 7.0.113-1.el8_8
AlmaLinux:8 dotnet-sdk-7.0-source-built-artifacts 0 7.0.111-1.el8_8
AlmaLinux:8 dotnet-sdk-7.0-source-built-artifacts 0 7.0.113-1.el8_8
AlmaLinux:8 dotnet-targeting-pack-6.0 0 6.0.22-1.el8_8
AlmaLinux:8 dotnet-targeting-pack-6.0 0 6.0.24-1.el8_8
AlmaLinux:8 dotnet-targeting-pack-7.0 0 7.0.11-1.el8_8
AlmaLinux:8 dotnet-targeting-pack-7.0 0 7.0.13-1.el8_8
AlmaLinux:8 dotnet-templates-6.0 0 6.0.122-1.el8_8
AlmaLinux:8 dotnet-templates-6.0 0 6.0.124-1.el8_8
AlmaLinux:8 dotnet-templates-7.0 0 7.0.111-1.el8_8
AlmaLinux:8 dotnet-templates-7.0 0 7.0.113-1.el8_8
AlmaLinux:8 netstandard-targeting-pack-2.1 0 7.0.111-1.el8_8
AlmaLinux:8 netstandard-targeting-pack-2.1 0 7.0.113-1.el8_8
AlmaLinux:9 aspnetcore-runtime-6.0 0 6.0.22-1.el9_2
AlmaLinux:9 aspnetcore-runtime-6.0 0 6.0.24-1.el9_2
AlmaLinux:9 aspnetcore-runtime-7.0 0 7.0.11-1.el9_2
AlmaLinux:9 aspnetcore-runtime-7.0 0 7.0.13-1.el9_2
AlmaLinux:9 aspnetcore-targeting-pack-6.0 0 6.0.22-1.el9_2
AlmaLinux:9 aspnetcore-targeting-pack-6.0 0 6.0.24-1.el9_2
AlmaLinux:9 aspnetcore-targeting-pack-7.0 0 7.0.11-1.el9_2
AlmaLinux:9 aspnetcore-targeting-pack-7.0 0 7.0.13-1.el9_2
AlmaLinux:9 dotnet-apphost-pack-6.0 0 6.0.22-1.el9_2
AlmaLinux:9 dotnet-apphost-pack-6.0 0 6.0.24-1.el9_2
AlmaLinux:9 dotnet-apphost-pack-7.0 0 7.0.11-1.el9_2
AlmaLinux:9 dotnet-apphost-pack-7.0 0 7.0.13-1.el9_2
AlmaLinux:9 dotnet-host 0 7.0.11-1.el9_2
AlmaLinux:9 dotnet-host 0 7.0.13-1.el9_2
AlmaLinux:9 dotnet-hostfxr-6.0 0 6.0.22-1.el9_2
AlmaLinux:9 dotnet-hostfxr-6.0 0 6.0.24-1.el9_2
AlmaLinux:9 dotnet-hostfxr-7.0 0 7.0.11-1.el9_2
AlmaLinux:9 dotnet-hostfxr-7.0 0 7.0.13-1.el9_2
AlmaLinux:9 dotnet-runtime-6.0 0 6.0.22-1.el9_2
AlmaLinux:9 dotnet-runtime-6.0 0 6.0.24-1.el9_2
AlmaLinux:9 dotnet-runtime-7.0 0 7.0.11-1.el9_2
AlmaLinux:9 dotnet-runtime-7.0 0 7.0.13-1.el9_2
AlmaLinux:9 dotnet-sdk-6.0 0 6.0.122-1.el9_2
AlmaLinux:9 dotnet-sdk-6.0 0 6.0.124-1.el9_2
AlmaLinux:9 dotnet-sdk-6.0-source-built-artifacts 0 6.0.122-1.el9_2
AlmaLinux:9 dotnet-sdk-6.0-source-built-artifacts 0 6.0.124-1.el9_2
AlmaLinux:9 dotnet-sdk-7.0 0 7.0.111-1.el9_2
AlmaLinux:9 dotnet-sdk-7.0 0 7.0.113-1.el9_2
AlmaLinux:9 dotnet-sdk-7.0-source-built-artifacts 0 7.0.111-1.el9_2
AlmaLinux:9 dotnet-sdk-7.0-source-built-artifacts 0 7.0.113-1.el9_2
AlmaLinux:9 dotnet-targeting-pack-6.0 0 6.0.22-1.el9_2
AlmaLinux:9 dotnet-targeting-pack-6.0 0 6.0.24-1.el9_2
AlmaLinux:9 dotnet-targeting-pack-7.0 0 7.0.11-1.el9_2
AlmaLinux:9 dotnet-targeting-pack-7.0 0 7.0.13-1.el9_2
AlmaLinux:9 dotnet-templates-6.0 0 6.0.122-1.el9_2
AlmaLinux:9 dotnet-templates-6.0 0 6.0.124-1.el9_2
AlmaLinux:9 dotnet-templates-7.0 0 7.0.111-1.el9_2
AlmaLinux:9 dotnet-templates-7.0 0 7.0.113-1.el9_2
AlmaLinux:9 netstandard-targeting-pack-2.1 0 7.0.111-1.el9_2
AlmaLinux:9 netstandard-targeting-pack-2.1 0 7.0.113-1.el9_2
Bitnami dotnet 6.0.0 No fix
Bitnami dotnet 6.0.0 6.0.1
Bitnami dotnet-sdk 6.0.0 No fix
Bitnami dotnet-sdk 6.0.0 6.0.1
Red Hat:enterprise_linux:8::appstream aspnetcore-runtime-6.0 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::appstream aspnetcore-runtime-6.0 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::appstream aspnetcore-runtime-7.0 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::appstream aspnetcore-runtime-7.0 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::appstream aspnetcore-targeting-pack-6.0 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::appstream aspnetcore-targeting-pack-6.0 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::appstream aspnetcore-targeting-pack-7.0 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::appstream aspnetcore-targeting-pack-7.0 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet 0 0:7.0.111-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet 0 0:7.0.113-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-apphost-pack-6.0 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-apphost-pack-6.0 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-apphost-pack-6.0-debuginfo 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-apphost-pack-6.0-debuginfo 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-apphost-pack-7.0 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-apphost-pack-7.0 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-apphost-pack-7.0-debuginfo 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-apphost-pack-7.0-debuginfo 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-host 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-host 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-host-debuginfo 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-host-debuginfo 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-hostfxr-6.0 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-hostfxr-6.0 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-hostfxr-6.0-debuginfo 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-hostfxr-6.0-debuginfo 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-hostfxr-7.0 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-hostfxr-7.0 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-hostfxr-7.0-debuginfo 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-hostfxr-7.0-debuginfo 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-runtime-6.0 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-runtime-6.0 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-runtime-6.0-debuginfo 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-runtime-6.0-debuginfo 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-runtime-7.0 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-runtime-7.0 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-runtime-7.0-debuginfo 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-runtime-7.0-debuginfo 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-sdk-6.0 0 0:6.0.122-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-sdk-6.0 0 0:6.0.124-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-sdk-6.0-debuginfo 0 0:6.0.122-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-sdk-6.0-debuginfo 0 0:6.0.124-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-sdk-6.0-source-built-artifacts 0 0:6.0.122-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-sdk-6.0-source-built-artifacts 0 0:6.0.124-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-sdk-7.0 0 0:7.0.111-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-sdk-7.0 0 0:7.0.113-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-sdk-7.0-debuginfo 0 0:7.0.111-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-sdk-7.0-debuginfo 0 0:7.0.113-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-sdk-7.0-source-built-artifacts 0 0:7.0.111-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-sdk-7.0-source-built-artifacts 0 0:7.0.113-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-targeting-pack-6.0 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-targeting-pack-6.0 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-targeting-pack-7.0 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-targeting-pack-7.0 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-templates-6.0 0 0:6.0.122-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-templates-6.0 0 0:6.0.124-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-templates-7.0 0 0:7.0.111-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet-templates-7.0 0 0:7.0.113-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet6.0 0 0:6.0.122-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet6.0 0 0:6.0.124-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet6.0-debuginfo 0 0:6.0.122-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet6.0-debuginfo 0 0:6.0.124-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet6.0-debugsource 0 0:6.0.122-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet6.0-debugsource 0 0:6.0.124-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet7.0 0 0:7.0.111-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet7.0 0 0:7.0.113-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet7.0-debuginfo 0 0:7.0.111-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet7.0-debuginfo 0 0:7.0.113-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet7.0-debugsource 0 0:7.0.111-1.el8_8
Red Hat:enterprise_linux:8::appstream dotnet7.0-debugsource 0 0:7.0.113-1.el8_8
Red Hat:enterprise_linux:8::appstream netstandard-targeting-pack-2.1 0 0:7.0.111-1.el8_8
Red Hat:enterprise_linux:8::appstream netstandard-targeting-pack-2.1 0 0:7.0.113-1.el8_8
Red Hat:enterprise_linux:8::crb aspnetcore-runtime-6.0 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::crb aspnetcore-runtime-6.0 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::crb aspnetcore-runtime-7.0 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::crb aspnetcore-runtime-7.0 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::crb aspnetcore-targeting-pack-6.0 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::crb aspnetcore-targeting-pack-6.0 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::crb aspnetcore-targeting-pack-7.0 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::crb aspnetcore-targeting-pack-7.0 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet 0 0:7.0.111-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet 0 0:7.0.113-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-apphost-pack-6.0 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-apphost-pack-6.0 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-apphost-pack-6.0-debuginfo 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-apphost-pack-6.0-debuginfo 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-apphost-pack-7.0 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-apphost-pack-7.0 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-apphost-pack-7.0-debuginfo 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-apphost-pack-7.0-debuginfo 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-host 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-host 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-host-debuginfo 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-host-debuginfo 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-hostfxr-6.0 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-hostfxr-6.0 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-hostfxr-6.0-debuginfo 0 0:6.0.22-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-hostfxr-6.0-debuginfo 0 0:6.0.24-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-hostfxr-7.0 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-hostfxr-7.0 0 0:7.0.13-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-hostfxr-7.0-debuginfo 0 0:7.0.11-1.el8_8
Red Hat:enterprise_linux:8::crb dotnet-hostfxr-7.0-debuginfo 0 0:7.0.13-1.el8_8

Related vulnerabilities