CVE-2023-2153810.01.2023, 22:15.NET Denial of Service VulnerabilityEnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTNIST7.5 HIGHNETWORKLOWNONECVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HmicrosoftCNA7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:CCISA-ADPADP------CVEADP------Base ScoreCVSS 3.xEPSS ScorePercentile: 69%VendorProductVersionmicrosoft.net6.0.0microsoftpowershell7.2𝑥= Vulnerable software versionsUbuntu ReleasesUbuntu ProductCodenamedotnet6kineticFixed 6.0.113-0ubuntu1~22.10.1releasedjammyFixed 6.0.113-0ubuntu1~22.04.1releasedfocaldnebionicdnexenialdnetrustydneCommon Weakness EnumerationCWE-502 - Deserialization of Untrusted DataThe application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.Referenceshttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21538https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21538
