CVE-2023-21538EUVD-2023-040610.01.2023, 22:15.NET Denial of Service VulnerabilityEnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTPrimary7.5 HIGHNETWORKLOWNONECVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HmicrosoftCNA7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:CBase ScoreCVSS 3.xEPSS ScorePercentile: 74%Affected Products (NVD)VendorProductVersionmicrosoft.net6.0.0microsoftpowershell7.2𝑥= Vulnerable software versionsUbuntu ReleasesUbuntu ProductCodenamedotnet6bionicdnefocaldnejammyFixed 6.0.113-0ubuntu1~22.04.1releasedkineticFixed 6.0.113-0ubuntu1~22.10.1releasedtrustydnexenialdneCommon Weakness EnumerationCWE-502 - Deserialization of Untrusted DataThe application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.Referenceshttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21538https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21538
