CVE-2022-24464
.NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
.NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
- Record
CVE-2022-24464- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C - Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2022-7083
.NET and Visual Studio Denial of Service Vulnerability
- Record
EUVD-2022-7083- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-cw98-9j8w-wxv9
.NET Denial of Service Vulnerability
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0, and .NET CORE 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
Microsoft is aware of a Denial of Service vulnerability, which exists in .NET 6.0, .NET 5.0, and .NET CORE 3.1 when parsing certain types of http form requests.
Affected Software
- Any .NET 6.0 application running on .NET 6.0.2 or lower
- Any .NET 5.0 application running on .NET 5.0.14 or lower
- Any .NET Core 3.1 application running on .NET Core 3.1.22 or lower
Patches
To fix the issue, please install the latest version of .NET 6.0 or .NET 5.0 or .NET Core 3.1.. If you have installed one or more .NET SDKs through Visual Studio, Visual Studio will prompt you to update Visual Studio, which will also update your .NET SDKs.
-
If you're using .NET Core 6.0, you should download and install Runtime 6.0.3 or SDK 6.0.201 (for Visual Studio 2022 v17.1) from https://dotnet.microsoft.com/download/dotnet-core/6.0.
-
If you're using .NET 5.0, you should download and install Runtime 5.0.15 or SDK 5.0.406 (for Visual Studio 2019 v16.11) or SDK 5.0.212 (for Visual Studio 2011 v16.9) from https://dotnet.microsoft.com/download/dotnet-core/5.0.
-
If you're using .NET Core 3.1, you should download and install Runtime 3.1.23 or SDK 3.1.417 (for Visual Studio 2019 v16.7.26) from https://dotnet.microsoft.com/download/dotnet-core/5.0. .NET 6.0 and .NET 5.0 updates are also available from Microsoft Update. To access this either type "Check for updates" in your Windows search, or open Settings, choose Update & Security and then click Check for Updates.
.NET 6.0 and .NET 5.0 and, .NET Core 3.1 updates are also available from Microsoft Update. To access this either type "Check for updates" in your Windows search, or open Settings, choose Update & Security and then click Check for Updates.
Other Details
- Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/212
- An Issue for this can be found at https://github.com/dotnet/aspnetcore/issues/40598
- MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/ CVE-2022-24464
- Record
GHSA-cw98-9j8w-wxv9- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD
.NET and Visual Studio Denial of Service Vulnerability
- Record
CVE-2022-24464- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-400
- Updated
- 2026-11-02
OSV
.NET and Visual Studio Denial of Service Vulnerability
- Record
CVE-2022-24464- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVGHSA-cw98-9j8w-wxv9
.NET Denial of Service Vulnerability
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0, and .NET CORE 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
Microsoft is aware of a Denial of Service vulnerability, which exists in .NET 6.0, .NET 5.0, and .NET CORE 3.1 when parsing certain types of http form requests.
Affected Software
- Any .NET 6.0 application running on .NET 6.0.2 or lower
- Any .NET 5.0 application running on .NET 5.0.14 or lower
- Any .NET Core 3.1 application running on .NET Core 3.1.22 or lower
Patches
To fix the issue, please install the latest version of .NET 6.0 or .NET 5.0 or .NET Core 3.1.. If you have installed one or more .NET SDKs through Visual Studio, Visual Studio will prompt you to update Visual Studio, which will also update your .NET SDKs.
-
If you're using .NET Core 6.0, you should download and install Runtime 6.0.3 or SDK 6.0.201 (for Visual Studio 2022 v17.1) from https://dotnet.microsoft.com/download/dotnet-core/6.0.
-
If you're using .NET 5.0, you should download and install Runtime 5.0.15 or SDK 5.0.406 (for Visual Studio 2019 v16.11) or SDK 5.0.212 (for Visual Studio 2011 v16.9) from https://dotnet.microsoft.com/download/dotnet-core/5.0.
-
If you're using .NET Core 3.1, you should download and install Runtime 3.1.23 or SDK 3.1.417 (for Visual Studio 2019 v16.7.26) from https://dotnet.microsoft.com/download/dotnet-core/5.0. .NET 6.0 and .NET 5.0 updates are also available from Microsoft Update. To access this either type "Check for updates" in your Windows search, or open Settings, choose Update & Security and then click Check for Updates.
.NET 6.0 and .NET 5.0 and, .NET Core 3.1 updates are also available from Microsoft Update. To access this either type "Check for updates" in your Windows search, or open Settings, choose Update & Security and then click Check for Updates.
Other Details
- Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/212
- An Issue for this can be found at https://github.com/dotnet/aspnetcore/issues/40598
- MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/ CVE-2022-24464
- Record
GHSA-cw98-9j8w-wxv9- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
Show 14 moreShow less
OSVRHSA-2022:0826
Red Hat Security Advisory: .NET 6.0 security and bugfix update
- Record
RHSA-2022:0826- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:0827
Red Hat Security Advisory: .NET Core 3.1 security and bugfix update
- Record
RHSA-2022:0827- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:0828
Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update
- Record
RHSA-2022:0828- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:0829
Red Hat Security Advisory: .NET Core 3.1 on RHEL 7 security and bugfix update
- Record
RHSA-2022:0829- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:0830
Red Hat Security Advisory: .NET 5.0 security and bugfix update
- Record
RHSA-2022:0830- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:0832
Red Hat Security Advisory: .NET 6.0 on RHEL 7 security and bugfix update
- Record
RHSA-2022:0832- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2022:0826
Important: .NET 6.0 security and bugfix update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 6.0.103 and .NET Runtime 6.0.3.
Security Fix(es):
-
dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)
-
dotnet: double parser stack buffer overrun (CVE-2022-24512)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2022:0826- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2022:0827
Important: .NET Core 3.1 security and bugfix update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 3.1.417 and .NET Runtime 3.1.23.
Security Fix(es):
-
dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)
-
dotnet: double parser stack buffer overrun (CVE-2022-24512)
-
brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2022:0827- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2022:0830
Important: .NET 5.0 security and bugfix update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 5.0.212 and .NET Runtime 5.0.15.
Security Fix(es):
-
dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)
-
dotnet: double parser stack buffer overrun (CVE-2022-24512)
-
brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2022:0830- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2022:0826 No score
Important: .NET 6.0 security and bugfix update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 6.0.103 and .NET Runtime 6.0.3.
Security Fix(es):
-
dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)
-
dotnet: double parser stack buffer overrun (CVE-2022-24512)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2022:0826- Updated
- 2026-11-02
OSVALSA-2022:0827 No score
Important: .NET Core 3.1 security and bugfix update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 3.1.417 and .NET Runtime 3.1.23.
Security Fix(es):
-
dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)
-
dotnet: double parser stack buffer overrun (CVE-2022-24512)
-
brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2022:0827- Updated
- 2026-11-02
OSVALSA-2022:0830 No score
Important: .NET 5.0 security and bugfix update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 5.0.212 and .NET Runtime 5.0.15.
Security Fix(es):
-
dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)
-
dotnet: double parser stack buffer overrun (CVE-2022-24512)
-
brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2022:0830- Updated
- 2026-11-02
OSVBIT-dotnet-2022-24464 No score
.NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
- Record
BIT-dotnet-2022-24464- Updated
- 2026-11-02
OSVBIT-dotnet-sdk-2022-24464 No score
.NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
- Record
BIT-dotnet-sdk-2022-24464- Updated
- 2026-11-02
Affected products
- microsoft .net
- microsoft .net 5.0
- microsoft .net 6.0
- microsoft .net core 3.1
- microsoft .net core
- microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)
- microsoft visual studio 2019 version 16.7 (includes 16.0 – 16.6)
- microsoft visual studio 2019 version 16.9 (includes 16.0 - 16.8)
- microsoft visual studio 2022 version 17.0
- microsoft visual studio 2019
- microsoft visual studio 2022
- fedoraproject fedora
Affected packages
| Package | Affected | Fixed |
|---|---|---|
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
3.0.0 up to 3.1.23 | 3.1.23 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
3.0.0 up to 3.1.23 | 3.1.23 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
3.0.0 up to 3.1.23 | 3.1.23 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
3.0.0 up to 3.1.23 | 3.1.23 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
3.0.0 up to 3.1.23 | 3.1.23 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
3.0.0 up to 3.1.23 | 3.1.23 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
3.0.0 up to 3.1.23 | 3.1.23 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
3.1.5 up to 3.1.23 | 3.1.23 |
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
3.0.0 up to 3.1.23 | 3.1.23 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
3.0.0 up to 3.1.23 | 3.1.23 |
Show 192 moreShow less
| Package | Affected | Fixed |
|---|---|---|
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
5.0.0 up to 5.0.15 | 5.0.15 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
5.0.0 up to 5.0.15 | 5.0.15 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
5.0.0 up to 5.0.15 | 5.0.15 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
5.0.0 up to 5.0.15 | 5.0.15 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
5.0.0 up to 5.0.15 | 5.0.15 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
5.0.0 up to 5.0.15 | 5.0.15 |
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
5.0.0 up to 5.0.15 | 5.0.15 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
5.0.0 up to 5.0.15 | 5.0.15 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
5.0.0 up to 5.0.15 | 5.0.15 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
5.0.0 up to 5.0.15 | 5.0.15 |
Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet |
5.0.0 up to 5.0.15 | 5.0.15 |
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
6.0.0 up to 6.0.3 | 6.0.3 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
6.0.0 up to 6.0.3 | 6.0.3 |
Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet |
6.0.0 up to 6.0.3 | 6.0.3 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
6.0.0 up to 6.0.3 | 6.0.3 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
6.0.0 up to 6.0.3 | 6.0.3 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
6.0.0 up to 6.0.3 | 6.0.3 |
Microsoft.AspNetCore.App.Runtime.osx-arm64NuGet |
6.0.0 up to 6.0.3 | 6.0.3 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
6.0.0 up to 6.0.3 | 6.0.3 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
6.0.0 up to 6.0.3 | 6.0.3 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
6.0.0 up to 6.0.3 | 6.0.3 |
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
6.0.0 up to 6.0.3 | 6.0.3 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
6.0.0 up to 6.0.3 | 6.0.3 |
aspnetcore-runtime-6.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 6.0.3-4.el8_5 | 6.0.3-4.el8_5 |
aspnetcore-targeting-pack-6.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 6.0.3-4.el8_5 | 6.0.3-4.el8_5 |
dotnetAlmaLinux:8 From an advisory covering 2 CVEs |
before 6.0.103-4.el8_5 | 6.0.103-4.el8_5 |
dotnet-apphost-pack-6.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 6.0.3-4.el8_5 | 6.0.3-4.el8_5 |
dotnet-hostAlmaLinux:8 From an advisory covering 2 CVEs |
before 6.0.3-4.el8_5 | 6.0.3-4.el8_5 |
dotnet-hostfxr-6.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 6.0.3-4.el8_5 | 6.0.3-4.el8_5 |
dotnet-runtime-6.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 6.0.3-4.el8_5 | 6.0.3-4.el8_5 |
dotnet-sdk-6.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 6.0.103-4.el8_5 | 6.0.103-4.el8_5 |
dotnet-targeting-pack-6.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 6.0.3-4.el8_5 | 6.0.3-4.el8_5 |
dotnet-templates-6.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 6.0.103-4.el8_5 | 6.0.103-4.el8_5 |
netstandard-targeting-pack-2.1AlmaLinux:8 From an advisory covering 2 CVEs |
before 6.0.103-4.el8_5 | 6.0.103-4.el8_5 |
aspnetcore-runtime-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.23-1.el8_5 | 3.1.23-1.el8_5 |
aspnetcore-targeting-pack-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.23-1.el8_5 | 3.1.23-1.el8_5 |
dotnet-apphost-pack-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.23-1.el8_5 | 3.1.23-1.el8_5 |
dotnet-hostfxr-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.23-1.el8_5 | 3.1.23-1.el8_5 |
dotnet-runtime-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.23-1.el8_5 | 3.1.23-1.el8_5 |
dotnet-sdk-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.417-1.el8_5 | 3.1.417-1.el8_5 |
dotnet-sdk-3.1-source-built-artifactsAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.417-1.el8_5 | 3.1.417-1.el8_5 |
dotnet-targeting-pack-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.23-1.el8_5 | 3.1.23-1.el8_5 |
dotnet-templates-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.417-1.el8_5 | 3.1.417-1.el8_5 |
aspnetcore-runtime-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.15-1.el8_5 | 5.0.15-1.el8_5 |
aspnetcore-targeting-pack-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.15-1.el8_5 | 5.0.15-1.el8_5 |
dotnet-apphost-pack-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.15-1.el8_5 | 5.0.15-1.el8_5 |
dotnet-hostfxr-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.15-1.el8_5 | 5.0.15-1.el8_5 |
dotnet-runtime-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.15-1.el8_5 | 5.0.15-1.el8_5 |
dotnet-sdk-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.212-1.el8_5 | 5.0.212-1.el8_5 |
dotnet-sdk-5.0-source-built-artifactsAlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.212-1.el8_5 | 5.0.212-1.el8_5 |
dotnet-targeting-pack-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.15-1.el8_5 | 5.0.15-1.el8_5 |
dotnet-templates-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.212-1.el8_5 | 5.0.212-1.el8_5 |
dotnetBitnami |
5.0.0 up to 5.0.15, 6.0.0 up to 6.0.3 | 5.0.156.0.3 |
dotnet-sdkBitnami |
5.0.0 up to 5.0.15, 6.0.0 up to 6.0.3 | 5.0.156.0.3 |
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
3.0.0 up to 3.1.23, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 21 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.23 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
3.0.0 up to 3.1.23, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 21 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.23 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
3.0.0 up to 3.1.23, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 21 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.23 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
3.0.0 up to 3.1.23, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 21 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.23 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
3.0.0 up to 3.1.23, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 21 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.23 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
3.0.0 up to 3.1.23, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 21 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.23 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
3.0.0 up to 3.1.23, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 21 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.23 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
3.1.5 up to 3.1.23, plus listed versions 3.1.103.1.113.1.123.1.133.1.14 Show 12 moreShow less3.1.153.1.163.1.173.1.183.1.193.1.203.1.213.1.223.1.63.1.73.1.83.1.9 |
3.1.23 |
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
3.0.0 up to 3.1.23, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 21 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.23 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
3.0.0 up to 3.1.23, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 21 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.23 |
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
5.0.0 up to 5.0.15, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 9 moreShow less5.0.145.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.15 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
5.0.0 up to 5.0.15, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 9 moreShow less5.0.145.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.15 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
5.0.0 up to 5.0.15, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 9 moreShow less5.0.145.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.15 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
5.0.0 up to 5.0.15, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 9 moreShow less5.0.145.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.15 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
5.0.0 up to 5.0.15, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 9 moreShow less5.0.145.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.15 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
5.0.0 up to 5.0.15, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 9 moreShow less5.0.145.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.15 |
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
5.0.0 up to 5.0.15, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 9 moreShow less5.0.145.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.15 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
5.0.0 up to 5.0.15, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 9 moreShow less5.0.145.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.15 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
5.0.0 up to 5.0.15, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 9 moreShow less5.0.145.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.15 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
5.0.0 up to 5.0.15, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 9 moreShow less5.0.145.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.15 |
Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet |
5.0.0 up to 5.0.15, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 9 moreShow less5.0.145.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.15 |
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
6.0.0 up to 6.0.3, plus listed versions 6.0.16.0.2 |
6.0.3 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
6.0.0 up to 6.0.3, plus listed versions 6.0.16.0.2 |
6.0.3 |
Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet |
6.0.0 up to 6.0.3, plus listed versions 6.0.16.0.2 |
6.0.3 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
6.0.0 up to 6.0.3, plus listed versions 6.0.16.0.2 |
6.0.3 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
6.0.0 up to 6.0.3, plus listed versions 6.0.16.0.2 |
6.0.3 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
6.0.0 up to 6.0.3, plus listed versions 6.0.16.0.2 |
6.0.3 |
Microsoft.AspNetCore.App.Runtime.osx-arm64NuGet |
6.0.0 up to 6.0.3, plus listed versions 6.0.16.0.2 |
6.0.3 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
6.0.0 up to 6.0.3, plus listed versions 6.0.16.0.2 |
6.0.3 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
6.0.0 up to 6.0.3, plus listed versions 6.0.16.0.2 |
6.0.3 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
6.0.0 up to 6.0.3, plus listed versions 6.0.16.0.2 |
6.0.3 |
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
6.0.0 up to 6.0.3, plus listed versions 6.0.16.0.2 |
6.0.3 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
6.0.0 up to 6.0.3, plus listed versions 6.0.16.0.2 |
6.0.3 |
aspnetcore-runtime-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.3-4.el8_5 | 0:6.0.3-4.el8_5 |
aspnetcore-targeting-pack-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.3-4.el8_5 | 0:6.0.3-4.el8_5 |
dotnetRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.103-4.el8_5 | 0:6.0.103-4.el8_5 |
dotnet-apphost-pack-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.3-4.el8_5 | 0:6.0.3-4.el8_5 |
dotnet-apphost-pack-6.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.3-4.el8_5 | 0:6.0.3-4.el8_5 |
dotnet-hostRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.3-4.el8_5 | 0:6.0.3-4.el8_5 |
dotnet-host-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.3-4.el8_5 | 0:6.0.3-4.el8_5 |
dotnet-hostfxr-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.3-4.el8_5 | 0:6.0.3-4.el8_5 |
dotnet-hostfxr-6.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.3-4.el8_5 | 0:6.0.3-4.el8_5 |
dotnet-runtime-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.3-4.el8_5 | 0:6.0.3-4.el8_5 |
dotnet-runtime-6.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.3-4.el8_5 | 0:6.0.3-4.el8_5 |
dotnet-sdk-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.103-4.el8_5 | 0:6.0.103-4.el8_5 |
dotnet-sdk-6.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.103-4.el8_5 | 0:6.0.103-4.el8_5 |
dotnet-targeting-pack-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.3-4.el8_5 | 0:6.0.3-4.el8_5 |
dotnet-templates-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.103-4.el8_5 | 0:6.0.103-4.el8_5 |
dotnet6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.103-4.el8_5 | 0:6.0.103-4.el8_5 |
dotnet6.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.103-4.el8_5 | 0:6.0.103-4.el8_5 |
dotnet6.0-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.103-4.el8_5 | 0:6.0.103-4.el8_5 |
netstandard-targeting-pack-2.1Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:6.0.103-4.el8_5 | 0:6.0.103-4.el8_5 |
aspnetcore-runtime-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.23-1.el8_5 | 0:3.1.23-1.el8_5 |
aspnetcore-targeting-pack-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.23-1.el8_5 | 0:3.1.23-1.el8_5 |
dotnet-apphost-pack-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.23-1.el8_5 | 0:3.1.23-1.el8_5 |
dotnet-apphost-pack-3.1-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.23-1.el8_5 | 0:3.1.23-1.el8_5 |
dotnet-hostfxr-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.23-1.el8_5 | 0:3.1.23-1.el8_5 |
dotnet-hostfxr-3.1-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.23-1.el8_5 | 0:3.1.23-1.el8_5 |
dotnet-runtime-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.23-1.el8_5 | 0:3.1.23-1.el8_5 |
dotnet-runtime-3.1-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.23-1.el8_5 | 0:3.1.23-1.el8_5 |
dotnet-sdk-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.417-1.el8_5 | 0:3.1.417-1.el8_5 |
dotnet-sdk-3.1-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.417-1.el8_5 | 0:3.1.417-1.el8_5 |
dotnet-targeting-pack-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.23-1.el8_5 | 0:3.1.23-1.el8_5 |
dotnet-templates-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.417-1.el8_5 | 0:3.1.417-1.el8_5 |
dotnet3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.417-1.el8_5 | 0:3.1.417-1.el8_5 |
dotnet3.1-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.417-1.el8_5 | 0:3.1.417-1.el8_5 |
dotnet3.1-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.417-1.el8_5 | 0:3.1.417-1.el8_5 |
dotnet-apphost-pack-3.1-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:3.1.23-1.el8_5 | 0:3.1.23-1.el8_5 |
dotnet-hostfxr-3.1-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:3.1.23-1.el8_5 | 0:3.1.23-1.el8_5 |
dotnet-runtime-3.1-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:3.1.23-1.el8_5 | 0:3.1.23-1.el8_5 |
dotnet-sdk-3.1-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:3.1.417-1.el8_5 | 0:3.1.417-1.el8_5 |
dotnet-sdk-3.1-source-built-artifactsRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:3.1.417-1.el8_5 | 0:3.1.417-1.el8_5 |
dotnet3.1-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:3.1.417-1.el8_5 | 0:3.1.417-1.el8_5 |
dotnet3.1-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:3.1.417-1.el8_5 | 0:3.1.417-1.el8_5 |
rh-dotnet50-aspnetcore-runtime-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.15-1.el7_9 | 0:5.0.15-1.el7_9 |
rh-dotnet50-aspnetcore-targeting-pack-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.15-1.el7_9 | 0:5.0.15-1.el7_9 |
rh-dotnet50-dotnetRed Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.212-1.el7_9 | 0:5.0.212-1.el7_9 |
rh-dotnet50-dotnet-apphost-pack-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.15-1.el7_9 | 0:5.0.15-1.el7_9 |
rh-dotnet50-dotnet-debuginfoRed Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.212-1.el7_9 | 0:5.0.212-1.el7_9 |
rh-dotnet50-dotnet-hostRed Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.15-1.el7_9 | 0:5.0.15-1.el7_9 |
rh-dotnet50-dotnet-hostfxr-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.15-1.el7_9 | 0:5.0.15-1.el7_9 |
rh-dotnet50-dotnet-runtime-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.15-1.el7_9 | 0:5.0.15-1.el7_9 |
rh-dotnet50-dotnet-sdk-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.212-1.el7_9 | 0:5.0.212-1.el7_9 |
rh-dotnet50-dotnet-sdk-5.0-source-built-artifactsRed Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.212-1.el7_9 | 0:5.0.212-1.el7_9 |
rh-dotnet50-dotnet-targeting-pack-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.15-1.el7_9 | 0:5.0.15-1.el7_9 |
rh-dotnet50-dotnet-templates-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.212-1.el7_9 | 0:5.0.212-1.el7_9 |
rh-dotnet50-netstandard-targeting-pack-2.1Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.212-1.el7_9 | 0:5.0.212-1.el7_9 |
rh-dotnet31-aspnetcore-runtime-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.23-1.el7_9 | 0:3.1.23-1.el7_9 |
rh-dotnet31-aspnetcore-targeting-pack-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.23-1.el7_9 | 0:3.1.23-1.el7_9 |
rh-dotnet31-dotnetRed Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.417-1.el7_9 | 0:3.1.417-1.el7_9 |
rh-dotnet31-dotnet-apphost-pack-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.23-1.el7_9 | 0:3.1.23-1.el7_9 |
rh-dotnet31-dotnet-debuginfoRed Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.417-1.el7_9 | 0:3.1.417-1.el7_9 |
rh-dotnet31-dotnet-hostRed Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.23-1.el7_9 | 0:3.1.23-1.el7_9 |
rh-dotnet31-dotnet-hostfxr-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.23-1.el7_9 | 0:3.1.23-1.el7_9 |
rh-dotnet31-dotnet-runtime-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.23-1.el7_9 | 0:3.1.23-1.el7_9 |
rh-dotnet31-dotnet-sdk-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.417-1.el7_9 | 0:3.1.417-1.el7_9 |
rh-dotnet31-dotnet-sdk-3.1-source-built-artifactsRed Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.417-1.el7_9 | 0:3.1.417-1.el7_9 |
rh-dotnet31-dotnet-targeting-pack-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.23-1.el7_9 | 0:3.1.23-1.el7_9 |
rh-dotnet31-dotnet-templates-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.417-1.el7_9 | 0:3.1.417-1.el7_9 |
rh-dotnet31-netstandard-targeting-pack-2.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.417-1.el7_9 | 0:3.1.417-1.el7_9 |
aspnetcore-runtime-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.15-1.el8_5 | 0:5.0.15-1.el8_5 |
aspnetcore-targeting-pack-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.15-1.el8_5 | 0:5.0.15-1.el8_5 |
dotnet-apphost-pack-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.15-1.el8_5 | 0:5.0.15-1.el8_5 |
dotnet-apphost-pack-5.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.15-1.el8_5 | 0:5.0.15-1.el8_5 |
dotnet-hostfxr-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.15-1.el8_5 | 0:5.0.15-1.el8_5 |
dotnet-hostfxr-5.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.15-1.el8_5 | 0:5.0.15-1.el8_5 |
dotnet-runtime-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.15-1.el8_5 | 0:5.0.15-1.el8_5 |
dotnet-runtime-5.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.15-1.el8_5 | 0:5.0.15-1.el8_5 |
dotnet-sdk-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.212-1.el8_5 | 0:5.0.212-1.el8_5 |
dotnet-sdk-5.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.212-1.el8_5 | 0:5.0.212-1.el8_5 |
dotnet-targeting-pack-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.15-1.el8_5 | 0:5.0.15-1.el8_5 |
dotnet-templates-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.212-1.el8_5 | 0:5.0.212-1.el8_5 |
dotnet5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.212-1.el8_5 | 0:5.0.212-1.el8_5 |
dotnet5.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.212-1.el8_5 | 0:5.0.212-1.el8_5 |
dotnet5.0-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.212-1.el8_5 | 0:5.0.212-1.el8_5 |
dotnet-apphost-pack-5.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:5.0.15-1.el8_5 | 0:5.0.15-1.el8_5 |
dotnet-hostfxr-5.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:5.0.15-1.el8_5 | 0:5.0.15-1.el8_5 |
dotnet-runtime-5.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:5.0.15-1.el8_5 | 0:5.0.15-1.el8_5 |
dotnet-sdk-5.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:5.0.212-1.el8_5 | 0:5.0.212-1.el8_5 |
dotnet-sdk-5.0-source-built-artifactsRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:5.0.212-1.el8_5 | 0:5.0.212-1.el8_5 |
dotnet5.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:5.0.212-1.el8_5 | 0:5.0.212-1.el8_5 |
dotnet5.0-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:5.0.212-1.el8_5 | 0:5.0.212-1.el8_5 |
rh-dotnet60-aspnetcore-runtime-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 2 CVEs |
before 0:6.0.3-3.el7_9 | 0:6.0.3-3.el7_9 |
rh-dotnet60-aspnetcore-targeting-pack-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 2 CVEs |
before 0:6.0.3-3.el7_9 | 0:6.0.3-3.el7_9 |
rh-dotnet60-dotnetRed Hat:rhel_dotnet:6.0::el7 From an advisory covering 2 CVEs |
before 0:6.0.103-3.el7_9 | 0:6.0.103-3.el7_9 |
rh-dotnet60-dotnet-apphost-pack-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 2 CVEs |
before 0:6.0.3-3.el7_9 | 0:6.0.3-3.el7_9 |
rh-dotnet60-dotnet-debuginfoRed Hat:rhel_dotnet:6.0::el7 From an advisory covering 2 CVEs |
before 0:6.0.103-3.el7_9 | 0:6.0.103-3.el7_9 |
rh-dotnet60-dotnet-hostRed Hat:rhel_dotnet:6.0::el7 From an advisory covering 2 CVEs |
before 0:6.0.3-3.el7_9 | 0:6.0.3-3.el7_9 |
rh-dotnet60-dotnet-hostfxr-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 2 CVEs |
before 0:6.0.3-3.el7_9 | 0:6.0.3-3.el7_9 |
rh-dotnet60-dotnet-runtime-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 2 CVEs |
before 0:6.0.3-3.el7_9 | 0:6.0.3-3.el7_9 |
rh-dotnet60-dotnet-sdk-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 2 CVEs |
before 0:6.0.103-3.el7_9 | 0:6.0.103-3.el7_9 |
rh-dotnet60-dotnet-sdk-6.0-source-built-artifactsRed Hat:rhel_dotnet:6.0::el7 From an advisory covering 2 CVEs |
before 0:6.0.103-3.el7_9 | 0:6.0.103-3.el7_9 |
rh-dotnet60-dotnet-targeting-pack-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 2 CVEs |
before 0:6.0.3-3.el7_9 | 0:6.0.3-3.el7_9 |
rh-dotnet60-dotnet-templates-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 2 CVEs |
before 0:6.0.103-3.el7_9 | 0:6.0.103-3.el7_9 |
rh-dotnet60-netstandard-targeting-pack-2.1Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 2 CVEs |
before 0:6.0.103-3.el7_9 | 0:6.0.103-3.el7_9 |
dotnet6.0Rocky Linux:8 From an advisory covering 2 CVEs |
before 0:6.0.103-4.el8_5 | 0:6.0.103-4.el8_5 |
dotnet3.1Rocky Linux:8 From an advisory covering 3 CVEs |
before 0:3.1.417-1.el8_5 | 0:3.1.417-1.el8_5 |
dotnet5.0Rocky Linux:8 From an advisory covering 3 CVEs |
before 0:5.0.212-1.el8_5 | 0:5.0.212-1.el8_5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-24464 is a high vulnerability (CVSS 7.5) in Microsoft .net, published March 9, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.55%, the 89th percentile. Fixed in Microsoft.AspNetCore.App.Runtime.linux-arm 3.1.23.
References
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24464
github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9
nvd.nist.gov/vuln/detail/CVE-2022-24464
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464
lists.fedoraproject.org/archives/list/[email protected]/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF
Show 38 moreShow less
vulners.com/cve/CVE-2022-24464
access.redhat.com/errata/RHSA-2022:0826
bugzilla.redhat.com/show_bug.cgi?id=2061847
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0826.json
cve.org/CVERecord?id=CVE-2022-24464
errata.rockylinux.org/RLSA-2022:0826