PT-2023-1452 · Microsoft · .Net Framework

Filip Dragovic · Publicado 2023-02-14 · Atualizado 2024-05-29 · CVE-2023-21722

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Média

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions .NET Framework (affected versions not specified)

Description The issue is related to incorrect cleanup or release of resources in the .NET Framework, which can be exploited to cause a denial of service. This allows an attacker to affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Link Following

Improper Resource Release

Enumeração de Fraquezas

CWE-59

CWE-404

Identificadores relacionados

BDU:2023-00859

CVE-2023-21722

Produtos afetados

.Net Framework

Referências · 6

• https://bdu.fstec.ru/vul/2023-00859 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-21722 · Nota de Segurança
• https://vuldb.com/ru/?id.220997 · Nota
• https://osv.dev/vulnerability/CVE-2023-21722 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21722 · Nota de Segurança