PT-2023-5471 · Microsoft+7 · Visual Studio+8

Kevin Jones · Published 2023-09-12 · Updated 2026-03-01 · CVE-2023-36799

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions .NET Core and Visual Studio (affected versions not specified)

Description The issue is related to a Denial of Service vulnerability in .NET Core and Visual Studio. It involves an uncontrolled consumption of resources. Exploitation of this issue could allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Resource Release

Resource Exhaustion

Weakness Enumeration

CWE-404

CWE-400

Related Identifiers

ALSA-2023:5143

ALSA-2023:5144

ALSA-2023:5145

ALSA-2023:5146

ALSA-2023:6242

ALSA-2023:6245

ALSA-2023:6246

ALSA-2023:6247

ALT-PU-2024-1065

ALT-PU-2024-1066

ALT-PU-2024-1067

ALT-PU-2024-1068

ALT-PU-2024-1069

ALT-PU-2024-16792

ALT-PU-2024-16794

ALT-PU-2024-16796

ALT-PU-2024-16939

ALT-PU-2024-2761

ALT-PU-2024-2763

ALT-PU-2024-2765

ALT-PU-2024-2767

BDU:2023-06110

BIT-DOTNET-2023-36799

BIT-DOTNET-SDK-2023-36799

CESA-2023_5144

CESA-2023_5145

CESA-2023_6245

CESA-2023_6247

CVE-2023-36799

GHSA-H3HV-63Q5-JGPR

RHSA-2023:5142

RHSA-2023:5143

RHSA-2023:5144

RHSA-2023:5145

RHSA-2023:5146

RHSA-2023:6242

RHSA-2023:6245

RHSA-2023:6246

RHSA-2023:6247

RHSA-2023:6249

RHSA-2023_5143

RHSA-2023_5144

RHSA-2023_5145

RHSA-2023_5146

RHSA-2023_6242

RHSA-2023_6245

RHSA-2023_6246

RHSA-2023_6247

RLSA-2023:5144

RLSA-2023:6242

RLSA-2023:6245

USN-6362-1

USN-6362-2

USN-6438-1

USN-6438-2

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Net Core

Red Hat

Rocky Linux

Ubuntu

Visual Studio

References · 69

• https://linux.oracle.com/errata/ELSA-2023-6247.html · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36799 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-6246.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-36799 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2023:6242 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6362-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-36799 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-36799 · Security Note
• https://errata.almalinux.org/8/ALSA-2023-6247.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-6362-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-36799 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-5145.html · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2023-6245.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2023:5144 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6362-1 · Vendor Advisory