CVE-2023-38171

Published: Oct 10, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: secure@microsoft.com (Secondary)

Description

Microsoft QUIC Denial of Service Vulnerability

Affected (7)

Products: Microsoft: .net, Visual Studio 2022, Windows 11 22h2, Windows Server 2022

4 products

Visual Studio 2022

Windows 11 22h2

Windows Server 2022

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net	7.0.0 ≤ version < 7.0.12
Microsoft Visual Studio 2022	17.2.0 ≤ version < 17.2.20
Microsoft Visual Studio 2022	17.4.0 ≤ version < 17.4.12
Microsoft Visual Studio 2022	17.6.0 ≤ version < 17.6.8
Microsoft Visual Studio 2022	17.7.0 ≤ version < 17.7.5
Microsoft Windows 11 22h2	version < 10.0.22621.2428
Microsoft Windows Server 2022	All versions

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38171

Source: secure@microsoft.com

PatchVendor Advisory

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38171

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.