The vulnerability of the Microsoft Visual Studio software development tool and the .NET Core software platform lies in improper resource cleanup or release mechanisms, which allows attackers to perform denial-of-service attacks.

🗓️ 12 Oct 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Vulnerability in Visual Studio and dotnet core due to improper resource cleanup enabling denial of service.

Reporter	Title	Published	Views	Family All 106
ALT Linux	Security fix for the ALT Linux 10 package dotnet-runtime-7.0 version 6.0.12-alt1	27 Dec 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package dotnet-aspnetcore-3.1 version 3.1.32-alt1	18 Mar 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.32-alt1	18 Mar 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package dotnet-bootstrap-6.0 version 6.0.12-alt1	20 Feb 202300:00	–	altlinux
ATTACKERKB	CVE-2022-38013	13 Sep 202219:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : dotnet6.0 (ALAS2022-2022-253)	10 Dec 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-092)	21 Mar 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : .NET 6.0 (ALSA-2022:6521)	16 Nov 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : .NET Core 3.1 (ALSA-2022:6523)	14 Oct 202200:00	–	nessus
Tenable Nessus	Fedora 37 : dotnet6.0 (2022-13046bb867)	14 Nov 202400:00	–	nessus

Vulners

Node

OR

microsoft .net_coreMatch3.1

microsoft microsoft_visual_studio_2019Range16.0–16.8

microsoft microsoft_visual_studio_2022Match17.0

microsoft microsoft_visual_studio_2022Match17.2

microsoft microsoft_visual_studio_2022Match17.3

microsoft .netMatch6.0

microsoft microsoft_visual_studio_2019Range16.0–16.10

fedora fedoraMatch35

fedora fedoraMatch36

fedora fedoraMatch37

Source	Link
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M/
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38013
web	www.web.nvd.nist.gov/view/vuln/detail

12 Oct 2023 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 37.5

CVSS 27.8

EPSS0.03233

visual studio dotnet core resource cleanup denial of service remote attack