{"id":"CVE-2023-36799","state":"PUBLISHED","title":".NET Core and Visual Studio Denial of Service Vulnerability","description":".NET Core and Visual Studio Denial of Service Vulnerability","publishedAt":"2023-09-12T16:58:38.681Z","updatedAt":"2025-10-30T18:18:07.707Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft .NET 6.0","Microsoft .NET 7.0","Microsoft Microsoft Visual Studio 2022 version 17.2","Microsoft Microsoft Visual Studio 2022 version 17.4","Microsoft Microsoft Visual Studio 2022 version 17.7","Microsoft Microsoft Visual Studio 2022 version 17.6","Microsoft PowerShell 7.2","Microsoft PowerShell 7.3"],"affected":[{"vendor":"Microsoft","product":".NET 6.0","versions":[{"version":"6.0.0","status":"affected","lessThan":"6.0.24","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":".NET 7.0","versions":[{"version":"7.0.0","status":"affected","lessThan":"7.0.13","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.2","versions":[{"version":"17.2.0","status":"affected","lessThan":"17.2.21","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.4","versions":[{"version":"17.4.0","status":"affected","lessThan":"17.4.13","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.7","versions":[{"version":"17.7.0","status":"affected","lessThan":"17.6.9","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.6","versions":[{"version":"17.6.0","status":"affected","lessThan":"17.6.9","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"PowerShell 7.2","versions":[{"version":"7.2.0","status":"affected","lessThan":"7.2.14","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"PowerShell 7.3","versions":[{"version":"7.3.0","status":"affected","lessThan":"7.2.14","versionType":"custom"}],"platforms":["Unknown"]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36799"],"weaknesses":["CWE-400"],"ingestedAt":"2026-10-29T20:06:08.715Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/36xxx/CVE-2023-36799.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-36799","state":"PUBLISHED","datePublished":"2023-09-12T16:58:38.681Z","dateUpdated":"2025-10-30T18:18:07.707Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2023-06-27T15:11:59.874Z"},"containers":{"cna":{"title":".NET Core and Visual Studio Denial of Service Vulnerability","descriptions":[{"lang":"en-US","value":".NET Core and Visual Studio Denial of Service Vulnerability"}],"affected":[{"vendor":"Microsoft","product":".NET 6.0","versions":[{"version":"6.0.0","status":"affected","lessThan":"6.0.24","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":".NET 7.0","versions":[{"version":"7.0.0","status":"affected","lessThan":"7.0.13","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.2","versions":[{"version":"17.2.0","status":"affected","lessThan":"17.2.21","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.4","versions":[{"version":"17.4.0","status":"affected","lessThan":"17.4.13","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.7","versions":[{"version":"17.7.0","status":"affected","lessThan":"17.6.9","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.6","versions":[{"version":"17.6.0","status":"affected","lessThan":"17.6.9","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"PowerShell 7.2","versions":[{"version":"7.2.0","status":"affected","lessThan":"7.2.14","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"PowerShell 7.3","versions":[{"version":"7.3.0","status":"affected","lessThan":"7.2.14","versionType":"custom"}],"platforms":["Unknown"]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36799","name":".NET Core and Visual Studio Denial of Service Vulnerability","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"MEDIUM","baseScore":6.5,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","description":"CWE-400: Uncontrolled Resource Consumption","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2025-10-30T18:18:07.707Z"},"datePublic":"2023-09-12T07:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.24"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"17.2.0","versionEndExcluding":"17.2.21"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"17.4.0","versionEndExcluding":"17.4.13"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*","versionStartIncluding":"17.7.0","versionEndExcluding":"17.6.9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*","versionStartIncluding":"17.6.0","versionEndExcluding":"17.6.9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.14"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.2.14"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-36799","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-05-29T16:23:47.132893Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-04T17:25:46.976Z"}},{"title":"CVE Program Container","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36799","name":".NET Core and Visual Studio Denial of Service Vulnerability","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T17:01:09.676Z"}}]}}}