VulnSocial

CVE-2023-38180Patch(fedoraproject / .net)

LOWCVSS 7.5 · HIGHCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch fedoraproject .net systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

.NET and Visual Studio Denial of Service Vulnerability

fedoraproject CVEsBack to dashboard
1.5/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2023-08-30. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Patch / fix
Other references
Weakness type (CWE)
CWE-400

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • .net
  • asp.net_core
  • fedora
  • visual_studio_2022

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
fedoraprojectmicrosoft
Products
.netasp.net_corefedoravisual_studio_2022

2 versions affected across 4 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-05-07: 1Patch / Workaround · 2026-05-07: 1Technical Details · 2026-05-07: 105-07
Signal classification1 categories
Patch
1100.0%
Referenced assets2 URLs
Full discourse1 post
  • ASPnix@ASPnix
    Patch

    Mitigating CVE-2023-38180 in http://ASP.NET Core Kestrel http://ASP.NET Core sites face denial-of-service risk from CVE-2023-38180 when Kestrel processes crafted HTTP/2 requests. Apply patches and set Kestrel limits to keep production ser… https://www.aspnix.com/posts/mitigating-cve-2023-38180-in-asp-net-core-kestrel #ASPNETCore #CVE #CVEs

    Post summary

    The post offers mitigation guidance for ASP.NET Core servers to address a denial‑of‑service vulnerability (CVE‑2023‑38180) caused by crafted HTTP/2 requests by applying patches and tightening Kestrel limits.

    0000058
    3.6K followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
OSfedoraprojectfedora37--
OSfedoraprojectfedora38--
Appmicrosoft.net---
Appmicrosoftasp.net_core---
Appmicrosoftvisual_studio_2022---

Explore more

Back to dashboardfedoraproject CVEsmicrosoft CVEs.net vulnerabilities