CVE-2023-36038: ASP.NET Core Denial of Service Vulnerability
Published Nov 14, 2023
·Updated
ASP.NET Core Denial of Service Vulnerability
Affected Software
19 affected componentsFixes available
Microsoft .NET 8.0
Microsoft Visual Studio 2022=17.2
Microsoft Visual Studio 2022=17.6
Microsoft Visual Studio 2022=17.7
Microsoft Visual Studio 2022>=17.2<17.2.22
Microsoft Visual Studio 2022>=17.4<17.4.14
Microsoft Visual Studio 2022>=17.6<17.6.10
Microsoft Visual Studio 2022>=17.7<17.7.7
All of the following
Any of the following
Microsoft .NET=8.0.0-preview.1
Microsoft .NET=8.0.0-preview.2
Microsoft .NET=8.0.0-preview.3
Microsoft .NET=8.0.0-preview.4
Microsoft .NET=8.0.0-preview.5
Microsoft .NET=8.0.0-preview.6
Microsoft .NET=8.0.0-preview.7
Microsoft .NET=8.0.0-rc1
Microsoft .NET=8.0.0-rc2
Microsoft ASP.NET Core=8.0.0
Microsoft ASP.NET Core=8.0
Remediation
Event History
Nov 14, 2023
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:00 AM
Description
CVE Published
via MITRE·09:35 PM
Data Sourced
via MITRE·09:35 PM
DescriptionSeverity
Nov 15, 2023
News Published
12:36 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-36038?
The severity of CVE-2023-36038 is high with a CVSS score of 8.2.
2
How does CVE-2023-36038 affect ASP.NET Core?
CVE-2023-36038 affects ASP.NET Core version 8.0.
3
Which versions of Visual Studio 2022 are affected by CVE-2023-36038?
CVE-2023-36038 affects Visual Studio 2022 versions 17.4, 17.2, and 17.7.
4
How can I fix the CVE-2023-36038 vulnerability in Visual Studio 2022?
To fix CVE-2023-36038 in Visual Studio 2022, update to version 17.4, 17.2, or 17.7.
5
Where can I find more information about CVE-2023-36038?
You can find more information about CVE-2023-36038 on the Microsoft Security Response Center website.