CVE-2023-38180 in microsoft .net
Exploitation of this CVE does not show up in logs, so there is no detection rule for it.
What the vulnerability is
.NET and Visual Studio Denial of Service Vulnerability
Affected software: microsoft .net, microsoft asp.net core, microsoft visual studio 2022, fedoraproject fedora
Scores
- CVSS: 7.5 (high)
- EPSS: 14.13% chance of exploitation in the next 30 days
- CISA KEV: Known exploited, listed 2023-08-09
- Published: 2023-08-08
What LogPulse has for it
- Detection rule: No
- Agent check (vulnerable version): No
- Mitigation: Yes, see below
How to mitigate it
Install the August 2023 .NET and Visual Studio updates (CVE-2023-38180)
Patch or upgrade. The August 2023 updates fix the Kestrel denial of service that attackers used against ASP.NET Core apps.
Applies to: .NET 6.0 and 7.0 and Visual Studio 2022 before the August 2023 updates
- List servers that run ASP.NET Core apps (dotnet --list-runtimes).
- Install .NET 6.0.21, 7.0.10 or later and redeploy self-contained apps.
- Update Visual Studio 2022 to the August 2023 release or later.
Sources:
Source data: NIST NVD, CISA KEV and FIRST EPSS. LogPulse processes new CVEs every hour.
We build every detection with great care, but no two environments are the same. Log sources, parsing and configuration differ, so test a detection in your own environment before you rely on it.