.NET and Visual Studio Denial of Service Vulnerability
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| .net | Microsoft | 5.0 (including) | 5.0 (including) |
| .net | Microsoft | 6.0.0 (including) | 6.0.0 (including) |
| .net_core | Microsoft | 3.1 (including) | 3.1 (including) |
| Powershell | Microsoft | 7.0 (including) | 7.0.11 (excluding) |
| Powershell | Microsoft | 7.2 (including) | 7.2.4 (excluding) |
| Visual_studio_2019 | Microsoft | 16.0 (including) | 16.9.21 (excluding) |
| Visual_studio_2019 | Microsoft | 16.10 (including) | 16.11.14 (excluding) |
| Visual_studio_2022 | Microsoft | 17.0 (including) | 17.0 (including) |
| Visual_studio_2022 | Microsoft | 17.1 (including) | 17.1 (including) |
| .NET Core on Red Hat Enterprise Linux | RedHat | rh-dotnet31-dotnet-0:3.1.419-1.el7_9 | * |
| .NET Core on Red Hat Enterprise Linux | RedHat | rh-dotnet50-dotnet-0:5.0.214-1.el7_9 | * |
| .NET Core on Red Hat Enterprise Linux | RedHat | rh-dotnet60-dotnet-0:6.0.105-1.el7_9 | * |
| Red Hat Enterprise Linux 8 | RedHat | dotnet6.0-0:6.0.105-1.el8_6 | * |
| Red Hat Enterprise Linux 8 | RedHat | dotnet5.0-0:5.0.214-1.el8_6 | * |
| Red Hat Enterprise Linux 8 | RedHat | dotnet3.1-0:3.1.419-1.el8_6 | * |
| Red Hat Enterprise Linux 9 | RedHat | dotnet6.0-0:6.0.105-1.el9_0 | * |
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23267
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5FPEQ6BTYRGTS6IYCDTZW6YF5HLQ3BY/
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-23267