CVE-2023-32030

Summary

.NET and Visual Studio Denial of Service Vulnerability

Affected Software

VendorProductVersion RangeStatus
MicrosoftMicrosoft .NET Framework 4.84.8.0 < 4.8.4644.0affected
MicrosoftMicrosoft .NET Framework 3.5 AND 4.84.8.0 < 4.8.4644.0affected
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.24.7.0 < 4.7.4050.0affected
MicrosoftMicrosoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.23.0.0.0 < 10.0.14393.5989affected
MicrosoftMicrosoft .NET Framework 4.6.2/4.7/4.7.1/4.7.24.7.0 < 4.7.04043.0affected
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8.14.8.1 < 4.8.9166.0affected
MicrosoftMicrosoft .NET Framework 4.6.24.7.0 < 4.7.04043.0affected
MicrosoftMicrosoft .NET Framework 3.5 and 4.6.24.7.0 < 10.0.10240.19983affected
MicrosoftMicrosoft .NET Framework 2.0 Service Pack 22.0.0 < 10.0.14393.5989affected
MicrosoftMicrosoft .NET Framework 3.0 Service Pack 23.0.0 < 3.0.6920.8954; 2.0.50727.8970affected
MicrosoftMicrosoft .NET Framework 3.53.5.0 < 3.0.6920.8954; 2.0.50727.8970affected
MicrosoftMicrosoft .NET Framework 3.5.13.5.0 < 3.0.6920.8954; 2.0.50727.8970affected

Weaknesses

  • Denial of Service

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: yes
    • Technical Impact: partial

CVE Program Container

Additional References

References