.NET Core SDK Denial of Service (CVE-2023-36038)

The version of Microsoft .NET Core SDK installed on the remote host is 8.0.x prior to 8.0.100. It is, therefore, affected by a denial of service DoS vulnerability in ASP.NET IIS where a remote unauthenticated user can issue specially crafted requests to a .NET application which may result in deni...

Security Update for Microsoft .NET Core (November 2023) (CVE-2023-36038)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a denial of service as referenced in the vendor advisory. - ASP.NET Core Denial of Service Vulnerability CVE-2023-36038 Note that Nessus has not tested for these issues but has...

Security Update for Microsoft ASP.NET Core (November 2023) (CVE-2023-36038)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a denial of service as referenced in the vendor advisory. - ASP.NET Core Denial of Service Vulnerability CVE-2023-36038 Note that Nessus has not tested for these issues but has...

Security Updates for Microsoft Visual Studio Products (November 2023)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of...

CVE-2023-36038

ASP.NET Core Denial of Service Vulnerability...

CVE-2023-36038

ASP.NET Core Denial of Service Vulnerability...

CVE-2023-36038 ASP.NET Core Denial of Service Vulnerability

...

CVE-2023-36038

CVE-2023-36038 is an ASP.NET Core Denial of Service vulnerability affecting ASP.NET Core on .NET 8 (including RC1) with IIS InProcess hosting. The issue can cause a DoS by cancelling HTTP requests, potentially increasing thread counts and leading to OutOfMemoryException and service availability i...

CVE-2023-36038

ASP.NET Core Denial of Service Vulnerability...