Lucene search

K

[email protected]NVD:CVE-2023-21722

HistoryFeb 14, 2023 - 8:15 p.m.

CVE-2023-21722

2023-02-1420:15:14

CWE-59

[email protected]

web.nvd.nist.gov

.net framework

dos

vulnerability

cve-2023-21722

5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

.NET Framework Denial of Service Vulnerability

Affected configurations

NVD

Node

microsoft.net_frameworkMatch3.5

OR

microsoft.net_frameworkMatch4.7.2

AND

microsoftwindows_10_1607Match-x64

OR

microsoftwindows_10_1607Match-x86

OR

microsoftwindows_10_1809Match-x64

OR

microsoftwindows_10_1809Match-x86

OR

microsoftwindows_server_2016Match-

OR

microsoftwindows_server_2019Match-

Node

microsoft.net_frameworkMatch3.5

OR

microsoft.net_frameworkMatch4.8

AND

microsoftwindows_10_1607

OR

microsoftwindows_10_1809x64

OR

microsoftwindows_10_1809x86

OR

microsoftwindows_10_20h2x64

OR

microsoftwindows_10_20h2x86

OR

microsoftwindows_10_21h2arm64

OR

microsoftwindows_10_21h2x64

OR

microsoftwindows_10_21h2x86

OR

microsoftwindows_10_22h2

OR

microsoftwindows_11_21h2arm64

OR

microsoftwindows_11_21h2x64

OR

microsoftwindows_server_2016Match-

OR

microsoftwindows_server_2019Match-

OR

microsoftwindows_server_2022Match-

Node

microsoft.net_frameworkMatch3.5

OR

microsoft.net_frameworkMatch4.8.1

AND

microsoftwindows_10_20h2

OR

microsoftwindows_10_21h2

OR

microsoftwindows_10_22h2

OR

microsoftwindows_11_21h2arm64

OR

microsoftwindows_11_21h2x64

OR

microsoftwindows_11_22h2arm64

OR

microsoftwindows_11_22h2x64

OR

microsoftwindows_server_2022Match-

Node

microsoft.net_frameworkMatch3.5

AND

microsoftwindows_server_2012Match-

Node

microsoft.net_frameworkMatch3.5.1

AND

microsoftwindows_server_2008Matchr2sp1x64

Node

microsoft.net_frameworkMatch3.0sp2

AND

microsoftwindows_server_2008Match-sp2

Node

microsoft.net_frameworkMatch2.0sp2

AND

microsoftwindows_server_2008Match-sp2

Node

microsoft.net_frameworkMatch3.5

OR

microsoft.net_frameworkMatch4.6.2

AND

microsoftwindows_10_1507

OR

microsoftwindows_10_1511

OR

microsoftwindows_10_1607

OR

microsoftwindows_10_1703

OR

microsoftwindows_10_1709

OR

microsoftwindows_10_1803

OR

microsoftwindows_10_1809

OR

microsoftwindows_10_1903

OR

microsoftwindows_10_1909

OR

microsoftwindows_10_2004

OR

microsoftwindows_10_20h2

OR

microsoftwindows_10_21h1

OR

microsoftwindows_10_21h2

OR

microsoftwindows_10_22h2

Node

microsoft.net_frameworkMatch4.6.2

AND

microsoftwindows_server_2008Match-sp2

Node

microsoft.net_frameworkMatch4.6.2

OR

microsoft.net_frameworkMatch4.7

OR

microsoft.net_frameworkMatch4.7.1

OR

microsoft.net_frameworkMatch4.7.2

AND

microsoftwindows_server_2008Matchr2sp1x64

OR

microsoftwindows_server_2012Match-

OR

microsoftwindows_server_2012Matchr2

Node

microsoft.net_frameworkMatch4.8

AND

microsoftwindows_server_2008Matchr2sp1x64

OR

microsoftwindows_server_2012Match-

OR

microsoftwindows_server_2012Matchr2

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722

5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

Related for NVD:CVE-2023-21722

mscve1 cve1 ubuntucve1 prion1 cvelist1 mskb19 openvas6 nessus3 kaspersky1 rapid7blog1