PT-2023-3298 · Microsoft+7 · Net+9

Kevin Jones · Published 2023-06-13 · Updated 2024-12-13 · CVE-2023-29331

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions .NET, .NET Framework, and Visual Studio (affected versions not specified)

Description The issue is related to insufficient input validation, which can be exploited to cause a denial of service. This allows an attacker to affect the system. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

RCE

Weakness Enumeration

CWE-400

CWE-20

Related Identifiers

ALSA-2023:3581

ALSA-2023:3582

ALSA-2023:3592

ALSA-2023:3593

ALT-PU-2023-4590

ALT-PU-2023-4591

ALT-PU-2023-4592

ALT-PU-2023-4593

ALT-PU-2023-4594

ALT-PU-2023-4595

ALT-PU-2023-4610

ALT-PU-2023-4611

ALT-PU-2024-16792

ALT-PU-2024-16794

ALT-PU-2024-16796

ALT-PU-2024-16939

BDU:2023-03439

BIT-DOTNET-2023-29331

BIT-DOTNET-SDK-2023-29331

CESA-2023_3582

CESA-2023_3593

CVE-2023-29331

GHSA-555C-2P6R-68MM

RHSA-2023:3580

RHSA-2023:3581

RHSA-2023:3582

RHSA-2023:3592

RHSA-2023:3593

RHSA-2023:4448

RHSA-2023:4449

RHSA-2023_3581

RHSA-2023_3582

RHSA-2023_3592

RHSA-2023_3593

RLSA-2023:3582

RLSA-2023:3593

USN-6161-1

USN-6161-2

Affected Products

.Net Framework

Alt Linux

Almalinux

Centos

Linuxmint

Net

Red Hat

Rocky Linux

Ubuntu

Visual Studio

References · 67

• https://ubuntu.com/security/CVE-2023-29331 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2023-3593.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-6161-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-32032 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2023:3582 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-24936 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2023:3593 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29331 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-555c-2p6r-68mm · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6161-2 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-dotnet-2023-29331 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29331 · Security Note
• https://osv.dev/vulnerability/CVE-2023-29331 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/701245 · Security Note
• https://ubuntu.com/security/CVE-2023-29337 · Vendor Advisory