CVE-2023-29331 HIGH

CVE-2023-29331: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Vendor Microsoft
Product .NET 6.0
Weakness CWE-400
Published June 14, 2023
Last update February 28, 2025
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

What the vulnerability does

01Description

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Key dates

02Disclosure timeline

June 14, 2023 CVE published
February 28, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-29957 Windows Deployment Services Denial of Service Vulnerability CVE-2021-28510 For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of the service will make the service unavailable. CVE-2025-26641 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability CVE-2023-24545 On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. CVE-2024-27088 es5-ext Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`