StackRadar

CVE-2023-36799

Medium

Advisory

Published 12 Sept 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.049
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
7
of 17,781 indexed, latest versions
Container images
20
deployed by those charts
Fix available
2 of 2
affected packages

Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability

Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 20 images.

Affected packageAffected versionsFixed inImages
Microsoft.NETCore.App.Runtime.linux-x64nuget6.0.4, 6.0.7, 6.0.8, 6.0.116.0.2217
Microsoft.NETCore.App.Runtime.linux-musl-x64nuget7.0.5, 7.0.107.0.113
OSV records
GHSA-h3hv-63q5-jgpr
Also known as
BIT-dotnet-2023-36799, BIT-dotnet-sdk-2023-36799

Charts affected

7 by stars
ChartLatestAffected imagesRadar Score
eshoponabpabp-charts1.0.010 of 15See more

eshoponabp abp-charts 1.0.0

10 of the 15 container images this version deploys carry CVE-2023-36799.

Container imageDigestPackageFixed in
ghcr.io/volosoft/eshoponabp/app-authserver:1.0.022ce496c67d7
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
ghcr.io/volosoft/eshoponabp/app-publicweb:1.0.07e53010dda55
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
ghcr.io/volosoft/eshoponabp/gateway-web:1.0.026465a2bf671
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
ghcr.io/volosoft/eshoponabp/gateway-web-public:1.0.050cab15c80d9
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
ghcr.io/volosoft/eshoponabp/service-administration:1.0.0206a9bee17a8
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
ghcr.io/volosoft/eshoponabp/service-basket:1.0.0dd5ce454072e
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
ghcr.io/volosoft/eshoponabp/service-catalog:1.0.07ecb00f53d99
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
ghcr.io/volosoft/eshoponabp/service-identity:1.0.0e53bf47b62d0
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
ghcr.io/volosoft/eshoponabp/service-ordering:1.0.15e836b17337f
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
ghcr.io/volosoft/eshoponabp/service-payment:1.0.02ca91145099c
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22

Open the chart page →

19,799
fedodo.chartfedodo0.5.112 of 4See more

fedodo.chart fedodo 0.5.11

2 of the 4 container images this version deploys carry CVE-2023-36799.

Container imageDigestPackageFixed in
fedodo/fedodo.be.activitypub:14728dada8e3216
Microsoft.NETCore.App.Runtime.linux-musl-x64@7.0.5
7.0.11
fedodo/fedodo.be.auth:208f8eb7a1207e
Microsoft.NETCore.App.Runtime.linux-musl-x64@7.0.5
7.0.11

Open the chart page →

4,399
kubernetes-azure-keyvault-secret-operatorbtungutVerified publisher1.7.01 of 1See more

kubernetes-azure-keyvault-secret-operator btungut 1.7.0

1 of the 1 container images this version deploys carry CVE-2023-36799.

Container imageDigestPackageFixed in
btungut/azure-keyvault-secret-operator:1.7.04a072e2edf71
Microsoft.NETCore.App.Runtime.linux-musl-x64@7.0.10
7.0.11

Open the chart page →

584
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.14 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

4 of the 7 container images this version deploys carry CVE-2023-36799.

Container imageDigestPackageFixed in
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.22
aidasi/swpbom:v1-1-net6-k8s-test-betafee6857b9bc9
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.22
aidasi/swpgateway:v1-1-net6-k8s-test-beta5ce8dbff7fdc
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.22
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.22

Open the chart page →

10,091
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-36799.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
Microsoft.NETCore.App.Runtime.linux-x64@6.0.11
6.0.22

Open the chart page →

4,920
archisteamfarmg0dscookie0.3.01 of 2See more

archisteamfarm g0dscookie 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-36799.

Container imageDigestPackageFixed in
ghcr.io/justarchinet/archisteamfarm:5.2.5.4c7c0a52303cb
Microsoft.NETCore.App.Runtime.linux-x64@6.0.4
6.0.22

Open the chart page →

966
cyclonedxopenshift-bootstrapsVerified publisher1.0.121 of 1See more

cyclonedx openshift-bootstraps 1.0.12

1 of the 1 container images this version deploys carry CVE-2023-36799.

Container imageDigestPackageFixed in
cyclonedx/cyclonedx-bom-repo-server:latest9e0c4db6e688
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22

Open the chart page →

726

Container images carrying it

20 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.22
1
aidasi/swpbom:v1-1-net6-k8s-test-betafee6857b9bc9
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.22
1
aidasi/swpgateway:v1-1-net6-k8s-test-beta5ce8dbff7fdc
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.22
1
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.22
1
btungut/azure-keyvault-secret-operator:1.7.04a072e2edf71
Microsoft.NETCore.App.Runtime.linux-musl-x64@7.0.10
7.0.11
1
cyclonedx/cyclonedx-bom-repo-server:latest9e0c4db6e688
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
1
fedodo/fedodo.be.activitypub:14728dada8e3216
Microsoft.NETCore.App.Runtime.linux-musl-x64@7.0.5
7.0.11
1
fedodo/fedodo.be.auth:208f8eb7a1207e
Microsoft.NETCore.App.Runtime.linux-musl-x64@7.0.5
7.0.11
1
nethermind/nethermind:1.14.615517708c3b6
Microsoft.NETCore.App.Runtime.linux-x64@6.0.11
6.0.22
1
ghcr.io/justarchinet/archisteamfarm:5.2.5.4c7c0a52303cb
Microsoft.NETCore.App.Runtime.linux-x64@6.0.4
6.0.22
1
ghcr.io/volosoft/eshoponabp/app-authserver:1.0.022ce496c67d7
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
1
ghcr.io/volosoft/eshoponabp/app-publicweb:1.0.07e53010dda55
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
1
ghcr.io/volosoft/eshoponabp/gateway-web:1.0.026465a2bf671
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
1
ghcr.io/volosoft/eshoponabp/gateway-web-public:1.0.050cab15c80d9
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
1
ghcr.io/volosoft/eshoponabp/service-administration:1.0.0206a9bee17a8
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
1
ghcr.io/volosoft/eshoponabp/service-basket:1.0.0dd5ce454072e
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
1
ghcr.io/volosoft/eshoponabp/service-catalog:1.0.07ecb00f53d99
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
1
ghcr.io/volosoft/eshoponabp/service-identity:1.0.0e53bf47b62d0
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
1
ghcr.io/volosoft/eshoponabp/service-ordering:1.0.15e836b17337f
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
1
ghcr.io/volosoft/eshoponabp/service-payment:1.0.02ca91145099c
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.22
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.