CVE-2022-23267

.NET and Visual Studio Denial of Service Vulnerability

7.5 HighFix available

.NET and Visual Studio Denial of Service Vulnerability

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

5.70%Up 4.8 points since May 11, 2022

What each source reports

CVE List Score used 7.5

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Record: CVE-2022-23267
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Updated: 2026-11-02

EUVDEUVD-2022-7011 7.5

.NET and Visual Studio Denial of Service Vulnerability

Record: EUVD-2022-7011
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Updated: 2026-11-02

GitHub AdvisoriesGHSA-485p-mrj5-8w2v 7.5

.NET Denial of Service Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0 and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A vulnerability exists in .NET 6.0, .NET 5.0 and .NET Core 3.1 where a malicious client can cause a Denial of Service via excess memory allocations through HttpClient.

Affected software

Any .NET 6.0 application running on .NET 6.0.4 or earlier.
Any .NET 5.0 application running .NET 5.0.16 or earlier.
Any .NET Core 3.1 applicaiton running on .NET Core 3.1.24 or earlier.

Patches

If you're using .NET Core 6.0, you should download and install Runtime 6.0.5 or SDK 6.0.105 (for Visual Studio 2022 v17.0) or SDK 6.0.203 (for Visual Studio 2022 v17.1) from https://dotnet.microsoft.com/download/dotnet-core/6.0.
If you're using .NET 5.0, you should download and install Runtime 5.0.17 or SDK 5.0.214 (for Visual Studio 2019 v16.9) or SDK 5.0.408 (for Visual Studio 2011 v16.11) from https://dotnet.microsoft.com/download/dotnet-core/5.0.
If you're using .NET Core 3.1, you should download and install Runtime 3.1.25 or SDK 3.1.419 (for Visual Studio 2019 v16.9 or Visual Studio 2011 16.11 or Visual Studio 2022 17.0 or Visual Studio 2022 17.1 ) from https://dotnet.microsoft.com/download/dotnet-core/3.1.

.NET 6.0, .NET 5.0 and .NET Core 3.1 updates are also available from Microsoft Update. To access this either type "Check for updates" in your Windows search, or open Settings, choose Update & Security and then click Check for Updates.

Other Details

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/221 An Issue for this can be found at https://github.com/dotnet/runtime/issues/69149 MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-23267

Record: GHSA-485p-mrj5-8w2v
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-400
Updated: 2026-11-02

NVD 7.5

.NET and Visual Studio Denial of Service Vulnerability

Record: CVE-2022-23267
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

OSV 7.5

.NET and Visual Studio Denial of Service Vulnerability

Record: CVE-2022-23267
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVGHSA-485p-mrj5-8w2v 7.5

.NET Denial of Service Vulnerability

A vulnerability exists in .NET 6.0, .NET 5.0 and .NET Core 3.1 where a malicious client can cause a Denial of Service via excess memory allocations through HttpClient.

Affected software

Any .NET 6.0 application running on .NET 6.0.4 or earlier.
Any .NET 5.0 application running .NET 5.0.16 or earlier.
Any .NET Core 3.1 applicaiton running on .NET Core 3.1.24 or earlier.

Patches

If you're using .NET Core 6.0, you should download and install Runtime 6.0.5 or SDK 6.0.105 (for Visual Studio 2022 v17.0) or SDK 6.0.203 (for Visual Studio 2022 v17.1) from https://dotnet.microsoft.com/download/dotnet-core/6.0.
If you're using .NET 5.0, you should download and install Runtime 5.0.17 or SDK 5.0.214 (for Visual Studio 2019 v16.9) or SDK 5.0.408 (for Visual Studio 2011 v16.11) from https://dotnet.microsoft.com/download/dotnet-core/5.0.
If you're using .NET Core 3.1, you should download and install Runtime 3.1.25 or SDK 3.1.419 (for Visual Studio 2019 v16.9 or Visual Studio 2011 16.11 or Visual Studio 2022 17.0 or Visual Studio 2022 17.1 ) from https://dotnet.microsoft.com/download/dotnet-core/3.1.

Other Details

Record: GHSA-485p-mrj5-8w2v
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-400
Updated: 2026-11-02

Show 16 moreShow less

OSVRHSA-2022:2194 7.5

Red Hat Security Advisory: .NET Core 3.1 on RHEL 7 security and bugfix update

Record: RHSA-2022:2194
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:2195 7.5

Red Hat Security Advisory: .NET 6.0 on RHEL 7 security and bugfix update

Record: RHSA-2022:2195
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:2196 7.5

Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update

Record: RHSA-2022:2196
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:2199 7.5

Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update

Record: RHSA-2022:2199
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:2200 7.5

Red Hat Security Advisory: .NET 5.0 security, bug fix, and enhancement update

Record: RHSA-2022:2200
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:2202 7.5

Red Hat Security Advisory: .NET Core 3.1 security, bug fix, and enhancement update

Record: RHSA-2022:2202
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:4588 7.5

Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update

Record: RHSA-2022:4588
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2022:2199 7.5

Important: .NET 6.0 security, bug fix, and enhancement update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 6.0.105 and .NET Core Runtime 6.0.5.

Security Fix(es):

dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)
dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)
dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2022:2199
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2022:2200 7.5

Important: .NET 5.0 security, bug fix, and enhancement update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 5.0.214 and .NET Core Runtime 5.0.17.

Security Fix(es):

dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)
dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)
dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2022:2200
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2022:2202 7.5

Important: .NET Core 3.1 security, bug fix, and enhancement update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 3.1.419 and .NET Core Runtime 3.1.25.

Security Fix(es):

dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)
dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)
dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2022:2202
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVALSA-2022:2199 No score

Important: .NET 6.0 security, bug fix, and enhancement update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 6.0.105 and .NET Core Runtime 6.0.5.

Security Fix(es):

dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)
dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)
dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2022:2199
Updated: 2026-11-02

OSVALSA-2022:2200 No score

Important: .NET 5.0 security, bug fix, and enhancement update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 5.0.214 and .NET Core Runtime 5.0.17.

Security Fix(es):

dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)
dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)
dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2022:2200
Updated: 2026-11-02

OSVALSA-2022:2202 No score

Important: .NET Core 3.1 security, bug fix, and enhancement update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 3.1.419 and .NET Core Runtime 3.1.25.

Security Fix(es):

dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)
dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)
dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2022:2202
Updated: 2026-11-02

OSVBIT-dotnet-2022-23267 No score

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Record: BIT-dotnet-2022-23267
Updated: 2026-11-02

OSVBIT-dotnet-sdk-2022-23267 No score

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Record: BIT-dotnet-sdk-2022-23267
Updated: 2026-11-02

OSVBIT-powershell-2022-23267 No score

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Record: BIT-powershell-2022-23267
Updated: 2026-11-02

Affected products

Show 5 moreShow less

Affected packages

Affected packages
Package	Affected	Fixed
`Microsoft.AspNetCore.App.Runtime.linux-arm` NuGet	3.0.0 up to 3.1.25	3.1.25
`Microsoft.AspNetCore.App.Runtime.linux-arm64` NuGet	3.0.0 up to 3.1.25	3.1.25
`Microsoft.AspNetCore.App.Runtime.linux-musl-arm64` NuGet	3.0.0 up to 3.1.25	3.1.25
`Microsoft.AspNetCore.App.Runtime.linux-musl-x64` NuGet	3.0.0 up to 3.1.25	3.1.25
`Microsoft.AspNetCore.App.Runtime.linux-x64` NuGet	3.0.0 up to 3.1.25	3.1.25
`Microsoft.AspNetCore.App.Runtime.osx-x64` NuGet	3.0.0 up to 3.1.25	3.1.25
`Microsoft.AspNetCore.App.Runtime.win-arm` NuGet	3.0.0 up to 3.1.25	3.1.25
`Microsoft.AspNetCore.App.Runtime.win-arm64` NuGet	3.0.0 up to 3.1.25	3.1.25
`Microsoft.AspNetCore.App.Runtime.win-x64` NuGet	3.0.0 up to 3.1.25	3.1.25
`Microsoft.AspNetCore.App.Runtime.win-x86` NuGet	3.0.0 up to 3.1.25	3.1.25

Show 228 moreShow less

Affected packages
Package	Affected	Fixed
`Microsoft.AspNetCore.App.Runtime.win-x64` NuGet	5.0.0 up to 5.0.17	5.0.17
`Microsoft.AspNetCore.App.Runtime.linux-x64` NuGet	5.0.0 up to 5.0.17	5.0.17
`Microsoft.AspNetCore.App.Runtime.win-x86` NuGet	5.0.0 up to 5.0.17	5.0.17
`Microsoft.AspNetCore.App.Runtime.osx-x64` NuGet	5.0.0 up to 5.0.17	5.0.17
`Microsoft.AspNetCore.App.Runtime.linux-musl-x64` NuGet	5.0.0 up to 5.0.17	5.0.17
`Microsoft.AspNetCore.App.Runtime.linux-arm64` NuGet	5.0.0 up to 5.0.17	5.0.17
`Microsoft.AspNetCore.App.Runtime.linux-arm` NuGet	5.0.0 up to 5.0.17	5.0.17
`Microsoft.AspNetCore.App.Runtime.win-arm64` NuGet	5.0.0 up to 5.0.17	5.0.17
`Microsoft.AspNetCore.App.Runtime.win-arm` NuGet	5.0.0 up to 5.0.17	5.0.17
`Microsoft.AspNetCore.App.Runtime.linux-musl-arm64` NuGet	5.0.0 up to 5.0.17	5.0.17
`Microsoft.AspNetCore.App.Runtime.linux-musl-arm` NuGet	5.0.1 up to 5.0.17	5.0.17
`Microsoft.AspNetCore.App.Runtime.linux-arm` NuGet	6.0.0 up to 6.0.5	6.0.5
`Microsoft.AspNetCore.App.Runtime.linux-arm64` NuGet	6.0.0 up to 6.0.5	6.0.5
`Microsoft.AspNetCore.App.Runtime.linux-musl-arm` NuGet	6.0.0 up to 6.0.5	6.0.5
`Microsoft.AspNetCore.App.Runtime.linux-musl-arm64` NuGet	6.0.0 up to 6.0.5	6.0.5
`Microsoft.AspNetCore.App.Runtime.linux-musl-x64` NuGet	6.0.0 up to 6.0.5	6.0.5
`Microsoft.AspNetCore.App.Runtime.linux-x64` NuGet	6.0.0 up to 6.0.5	6.0.5
`Microsoft.AspNetCore.App.Runtime.osx-arm64` NuGet	6.0.0 up to 6.0.5	6.0.5
`Microsoft.AspNetCore.App.Runtime.osx-x64` NuGet	6.0.0 up to 6.0.5	6.0.5
`Microsoft.AspNetCore.App.Runtime.win-arm` NuGet	6.0.0 up to 6.0.5	6.0.5
`Microsoft.AspNetCore.App.Runtime.win-arm64` NuGet	6.0.0 up to 6.0.5	6.0.5
`Microsoft.AspNetCore.App.Runtime.win-x64` NuGet	6.0.0 up to 6.0.5	6.0.5
`Microsoft.AspNetCore.App.Runtime.win-x86` NuGet	6.0.0 up to 6.0.5	6.0.5
`aspnetcore-runtime-6.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 6.0.5-1.el8_6	6.0.5-1.el8_6
`aspnetcore-targeting-pack-6.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 6.0.5-1.el8_6	6.0.5-1.el8_6
`dotnet` AlmaLinux:8 From an advisory covering 3 CVEs	before 6.0.105-1.el8_6	6.0.105-1.el8_6
`dotnet-apphost-pack-6.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 6.0.5-1.el8_6	6.0.5-1.el8_6
`dotnet-host` AlmaLinux:8 From an advisory covering 3 CVEs	before 6.0.5-1.el8_6	6.0.5-1.el8_6
`dotnet-hostfxr-6.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 6.0.5-1.el8_6	6.0.5-1.el8_6
`dotnet-runtime-6.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 6.0.5-1.el8_6	6.0.5-1.el8_6
`dotnet-sdk-6.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 6.0.105-1.el8_6	6.0.105-1.el8_6
`dotnet-sdk-6.0-source-built-artifacts` AlmaLinux:8 From an advisory covering 3 CVEs	before 6.0.105-1.el8_6	6.0.105-1.el8_6
`dotnet-targeting-pack-6.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 6.0.5-1.el8_6	6.0.5-1.el8_6
`dotnet-templates-6.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 6.0.105-1.el8_6	6.0.105-1.el8_6
`netstandard-targeting-pack-2.1` AlmaLinux:8 From an advisory covering 3 CVEs	before 6.0.105-1.el8_6	6.0.105-1.el8_6
`aspnetcore-runtime-5.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 5.0.17-1.el8_6	5.0.17-1.el8_6
`aspnetcore-targeting-pack-5.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 5.0.17-1.el8_6	5.0.17-1.el8_6
`dotnet-apphost-pack-5.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 5.0.17-1.el8_6	5.0.17-1.el8_6
`dotnet-hostfxr-5.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 5.0.17-1.el8_6	5.0.17-1.el8_6
`dotnet-runtime-5.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 5.0.17-1.el8_6	5.0.17-1.el8_6
`dotnet-sdk-5.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 5.0.214-1.el8_6	5.0.214-1.el8_6
`dotnet-sdk-5.0-source-built-artifacts` AlmaLinux:8 From an advisory covering 3 CVEs	before 5.0.214-1.el8_6	5.0.214-1.el8_6
`dotnet-targeting-pack-5.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 5.0.17-1.el8_6	5.0.17-1.el8_6
`dotnet-templates-5.0` AlmaLinux:8 From an advisory covering 3 CVEs	before 5.0.214-1.el8_6	5.0.214-1.el8_6
`aspnetcore-runtime-3.1` AlmaLinux:8 From an advisory covering 3 CVEs	before 3.1.25-1.el8_6	3.1.25-1.el8_6
`aspnetcore-targeting-pack-3.1` AlmaLinux:8 From an advisory covering 3 CVEs	before 3.1.25-1.el8_6	3.1.25-1.el8_6
`dotnet-apphost-pack-3.1` AlmaLinux:8 From an advisory covering 3 CVEs	before 3.1.25-1.el8_6	3.1.25-1.el8_6
`dotnet-hostfxr-3.1` AlmaLinux:8 From an advisory covering 3 CVEs	before 3.1.25-1.el8_6	3.1.25-1.el8_6
`dotnet-runtime-3.1` AlmaLinux:8 From an advisory covering 3 CVEs	before 3.1.25-1.el8_6	3.1.25-1.el8_6
`dotnet-sdk-3.1` AlmaLinux:8 From an advisory covering 3 CVEs	before 3.1.419-1.el8_6	3.1.419-1.el8_6
`dotnet-sdk-3.1-source-built-artifacts` AlmaLinux:8 From an advisory covering 3 CVEs	before 3.1.419-1.el8_6	3.1.419-1.el8_6
`dotnet-targeting-pack-3.1` AlmaLinux:8 From an advisory covering 3 CVEs	before 3.1.25-1.el8_6	3.1.25-1.el8_6
`dotnet-templates-3.1` AlmaLinux:8 From an advisory covering 3 CVEs	before 3.1.419-1.el8_6	3.1.419-1.el8_6
`dotnet` Bitnami	5.0.0 up to 5.0.1, 6.0.0 up to 6.0.1	5.0.16.0.1
`dotnet-sdk` Bitnami	5.0.0 up to 5.0.1, 6.0.0 up to 6.0.1	5.0.16.0.1
`powershell` Bitnami	7.0.0 up to 7.0.11, 7.2.0 up to 7.2.4	7.0.117.2.4
`Microsoft.AspNetCore.App.Runtime.linux-arm` NuGet	3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less 3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.25
`Microsoft.AspNetCore.App.Runtime.linux-arm64` NuGet	3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less 3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.25
`Microsoft.AspNetCore.App.Runtime.linux-musl-arm64` NuGet	3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less 3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.25
`Microsoft.AspNetCore.App.Runtime.linux-musl-x64` NuGet	3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less 3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.25
`Microsoft.AspNetCore.App.Runtime.linux-x64` NuGet	3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less 3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.25
`Microsoft.AspNetCore.App.Runtime.osx-x64` NuGet	3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less 3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.25
`Microsoft.AspNetCore.App.Runtime.win-arm` NuGet	3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less 3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.25
`Microsoft.AspNetCore.App.Runtime.win-arm64` NuGet	3.0.0 up to 3.1.25, plus listed versions 3.1.103.1.113.1.123.1.133.1.14 Show 15 moreShow less 3.1.153.1.163.1.173.1.183.1.193.1.203.1.213.1.223.1.233.1.243.1.53.1.63.1.73.1.83.1.9	3.1.25
`Microsoft.AspNetCore.App.Runtime.win-x64` NuGet	3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less 3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.25
`Microsoft.AspNetCore.App.Runtime.win-x86` NuGet	3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less 3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.25
`Microsoft.AspNetCore.App.Runtime.win-x64` NuGet	5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less 5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9	5.0.17
`Microsoft.AspNetCore.App.Runtime.linux-x64` NuGet	5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less 5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9	5.0.17
`Microsoft.AspNetCore.App.Runtime.win-x86` NuGet	5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less 5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9	5.0.17
`Microsoft.AspNetCore.App.Runtime.osx-x64` NuGet	5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less 5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9	5.0.17
`Microsoft.AspNetCore.App.Runtime.linux-musl-x64` NuGet	5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less 5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9	5.0.17
`Microsoft.AspNetCore.App.Runtime.linux-arm64` NuGet	5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less 5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9	5.0.17
`Microsoft.AspNetCore.App.Runtime.linux-arm` NuGet	5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less 5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9	5.0.17
`Microsoft.AspNetCore.App.Runtime.win-arm64` NuGet	5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less 5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9	5.0.17
`Microsoft.AspNetCore.App.Runtime.win-arm` NuGet	5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less 5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9	5.0.17
`Microsoft.AspNetCore.App.Runtime.linux-musl-arm64` NuGet	5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less 5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9	5.0.17
`Microsoft.AspNetCore.App.Runtime.linux-musl-arm` NuGet	5.0.1 up to 5.0.17, plus listed versions 5.0.105.0.115.0.125.0.135.0.14 Show 10 moreShow less 5.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9	5.0.17
`Microsoft.AspNetCore.App.Runtime.linux-arm` NuGet	6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4	6.0.5
`Microsoft.AspNetCore.App.Runtime.linux-arm64` NuGet	6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4	6.0.5
`Microsoft.AspNetCore.App.Runtime.linux-musl-arm` NuGet	6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4	6.0.5
`Microsoft.AspNetCore.App.Runtime.linux-musl-arm64` NuGet	6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4	6.0.5
`Microsoft.AspNetCore.App.Runtime.linux-musl-x64` NuGet	6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4	6.0.5
`Microsoft.AspNetCore.App.Runtime.linux-x64` NuGet	6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4	6.0.5
`Microsoft.AspNetCore.App.Runtime.osx-arm64` NuGet	6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4	6.0.5
`Microsoft.AspNetCore.App.Runtime.osx-x64` NuGet	6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4	6.0.5
`Microsoft.AspNetCore.App.Runtime.win-arm` NuGet	6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4	6.0.5
`Microsoft.AspNetCore.App.Runtime.win-arm64` NuGet	6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4	6.0.5
`Microsoft.AspNetCore.App.Runtime.win-x64` NuGet	6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4	6.0.5
`Microsoft.AspNetCore.App.Runtime.win-x86` NuGet	6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4	6.0.5
`rh-dotnet31-aspnetcore-runtime-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.25-1.el7_9	0:3.1.25-1.el7_9
`rh-dotnet31-aspnetcore-targeting-pack-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.25-1.el7_9	0:3.1.25-1.el7_9
`rh-dotnet31-dotnet` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.419-1.el7_9	0:3.1.419-1.el7_9
`rh-dotnet31-dotnet-apphost-pack-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.25-1.el7_9	0:3.1.25-1.el7_9
`rh-dotnet31-dotnet-debuginfo` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.419-1.el7_9	0:3.1.419-1.el7_9
`rh-dotnet31-dotnet-host` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.25-1.el7_9	0:3.1.25-1.el7_9
`rh-dotnet31-dotnet-hostfxr-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.25-1.el7_9	0:3.1.25-1.el7_9
`rh-dotnet31-dotnet-runtime-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.25-1.el7_9	0:3.1.25-1.el7_9
`rh-dotnet31-dotnet-sdk-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.419-1.el7_9	0:3.1.419-1.el7_9
`rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.419-1.el7_9	0:3.1.419-1.el7_9
`rh-dotnet31-dotnet-targeting-pack-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.25-1.el7_9	0:3.1.25-1.el7_9
`rh-dotnet31-dotnet-templates-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.419-1.el7_9	0:3.1.419-1.el7_9
`rh-dotnet31-netstandard-targeting-pack-2.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.419-1.el7_9	0:3.1.419-1.el7_9
`rh-dotnet60-aspnetcore-runtime-6.0` Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs	before 0:6.0.5-1.el7_9	0:6.0.5-1.el7_9
`rh-dotnet60-aspnetcore-targeting-pack-6.0` Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs	before 0:6.0.5-1.el7_9	0:6.0.5-1.el7_9
`rh-dotnet60-dotnet` Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs	before 0:6.0.105-1.el7_9	0:6.0.105-1.el7_9
`rh-dotnet60-dotnet-apphost-pack-6.0` Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs	before 0:6.0.5-1.el7_9	0:6.0.5-1.el7_9
`rh-dotnet60-dotnet-debuginfo` Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs	before 0:6.0.105-1.el7_9	0:6.0.105-1.el7_9
`rh-dotnet60-dotnet-host` Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs	before 0:6.0.5-1.el7_9	0:6.0.5-1.el7_9
`rh-dotnet60-dotnet-hostfxr-6.0` Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs	before 0:6.0.5-1.el7_9	0:6.0.5-1.el7_9
`rh-dotnet60-dotnet-runtime-6.0` Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs	before 0:6.0.5-1.el7_9	0:6.0.5-1.el7_9
`rh-dotnet60-dotnet-sdk-6.0` Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs	before 0:6.0.105-1.el7_9	0:6.0.105-1.el7_9
`rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts` Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs	before 0:6.0.105-1.el7_9	0:6.0.105-1.el7_9
`rh-dotnet60-dotnet-targeting-pack-6.0` Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs	before 0:6.0.5-1.el7_9	0:6.0.5-1.el7_9
`rh-dotnet60-dotnet-templates-6.0` Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs	before 0:6.0.105-1.el7_9	0:6.0.105-1.el7_9
`rh-dotnet60-netstandard-targeting-pack-2.1` Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs	before 0:6.0.105-1.el7_9	0:6.0.105-1.el7_9
`rh-dotnet50-aspnetcore-runtime-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.17-1.el7_9	0:5.0.17-1.el7_9
`rh-dotnet50-aspnetcore-targeting-pack-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.17-1.el7_9	0:5.0.17-1.el7_9
`rh-dotnet50-dotnet` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.214-1.el7_9	0:5.0.214-1.el7_9
`rh-dotnet50-dotnet-apphost-pack-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.17-1.el7_9	0:5.0.17-1.el7_9
`rh-dotnet50-dotnet-debuginfo` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.214-1.el7_9	0:5.0.214-1.el7_9
`rh-dotnet50-dotnet-host` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.17-1.el7_9	0:5.0.17-1.el7_9
`rh-dotnet50-dotnet-hostfxr-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.17-1.el7_9	0:5.0.17-1.el7_9
`rh-dotnet50-dotnet-runtime-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.17-1.el7_9	0:5.0.17-1.el7_9
`rh-dotnet50-dotnet-sdk-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.214-1.el7_9	0:5.0.214-1.el7_9
`rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.214-1.el7_9	0:5.0.214-1.el7_9
`rh-dotnet50-dotnet-targeting-pack-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.17-1.el7_9	0:5.0.17-1.el7_9
`rh-dotnet50-dotnet-templates-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.214-1.el7_9	0:5.0.214-1.el7_9
`rh-dotnet50-netstandard-targeting-pack-2.1` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.214-1.el7_9	0:5.0.214-1.el7_9
`aspnetcore-runtime-6.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`aspnetcore-targeting-pack-6.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`dotnet` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el8_6	0:6.0.105-1.el8_6
`dotnet-apphost-pack-6.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`dotnet-apphost-pack-6.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`dotnet-host` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`dotnet-host-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`dotnet-hostfxr-6.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`dotnet-hostfxr-6.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`dotnet-runtime-6.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`dotnet-runtime-6.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`dotnet-sdk-6.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el8_6	0:6.0.105-1.el8_6
`dotnet-sdk-6.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el8_6	0:6.0.105-1.el8_6
`dotnet-targeting-pack-6.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`dotnet-templates-6.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el8_6	0:6.0.105-1.el8_6
`dotnet6.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el8_6	0:6.0.105-1.el8_6
`dotnet6.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el8_6	0:6.0.105-1.el8_6
`dotnet6.0-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el8_6	0:6.0.105-1.el8_6
`netstandard-targeting-pack-2.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el8_6	0:6.0.105-1.el8_6
`dotnet-apphost-pack-6.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`dotnet-host-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`dotnet-hostfxr-6.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`dotnet-runtime-6.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:6.0.5-1.el8_6	0:6.0.5-1.el8_6
`dotnet-sdk-6.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:6.0.105-1.el8_6	0:6.0.105-1.el8_6
`dotnet-sdk-6.0-source-built-artifacts` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:6.0.105-1.el8_6	0:6.0.105-1.el8_6
`dotnet6.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:6.0.105-1.el8_6	0:6.0.105-1.el8_6
`dotnet6.0-debugsource` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:6.0.105-1.el8_6	0:6.0.105-1.el8_6
`aspnetcore-runtime-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.17-1.el8_6	0:5.0.17-1.el8_6
`aspnetcore-targeting-pack-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.17-1.el8_6	0:5.0.17-1.el8_6
`dotnet-apphost-pack-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.17-1.el8_6	0:5.0.17-1.el8_6
`dotnet-apphost-pack-5.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.17-1.el8_6	0:5.0.17-1.el8_6
`dotnet-hostfxr-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.17-1.el8_6	0:5.0.17-1.el8_6
`dotnet-hostfxr-5.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.17-1.el8_6	0:5.0.17-1.el8_6
`dotnet-runtime-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.17-1.el8_6	0:5.0.17-1.el8_6
`dotnet-runtime-5.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.17-1.el8_6	0:5.0.17-1.el8_6
`dotnet-sdk-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.214-1.el8_6	0:5.0.214-1.el8_6
`dotnet-sdk-5.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.214-1.el8_6	0:5.0.214-1.el8_6
`dotnet-targeting-pack-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.17-1.el8_6	0:5.0.17-1.el8_6
`dotnet-templates-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.214-1.el8_6	0:5.0.214-1.el8_6
`dotnet5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.214-1.el8_6	0:5.0.214-1.el8_6
`dotnet5.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.214-1.el8_6	0:5.0.214-1.el8_6
`dotnet5.0-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.214-1.el8_6	0:5.0.214-1.el8_6
`dotnet-apphost-pack-5.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:5.0.17-1.el8_6	0:5.0.17-1.el8_6
`dotnet-hostfxr-5.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:5.0.17-1.el8_6	0:5.0.17-1.el8_6
`dotnet-runtime-5.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:5.0.17-1.el8_6	0:5.0.17-1.el8_6
`dotnet-sdk-5.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:5.0.214-1.el8_6	0:5.0.214-1.el8_6
`dotnet-sdk-5.0-source-built-artifacts` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:5.0.214-1.el8_6	0:5.0.214-1.el8_6
`dotnet5.0-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:5.0.214-1.el8_6	0:5.0.214-1.el8_6
`dotnet5.0-debugsource` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:5.0.214-1.el8_6	0:5.0.214-1.el8_6
`aspnetcore-runtime-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.25-1.el8_6	0:3.1.25-1.el8_6
`aspnetcore-targeting-pack-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.25-1.el8_6	0:3.1.25-1.el8_6
`dotnet-apphost-pack-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.25-1.el8_6	0:3.1.25-1.el8_6
`dotnet-apphost-pack-3.1-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.25-1.el8_6	0:3.1.25-1.el8_6
`dotnet-hostfxr-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.25-1.el8_6	0:3.1.25-1.el8_6
`dotnet-hostfxr-3.1-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.25-1.el8_6	0:3.1.25-1.el8_6
`dotnet-runtime-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.25-1.el8_6	0:3.1.25-1.el8_6
`dotnet-runtime-3.1-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.25-1.el8_6	0:3.1.25-1.el8_6
`dotnet-sdk-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.419-1.el8_6	0:3.1.419-1.el8_6
`dotnet-sdk-3.1-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.419-1.el8_6	0:3.1.419-1.el8_6
`dotnet-targeting-pack-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.25-1.el8_6	0:3.1.25-1.el8_6
`dotnet-templates-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.419-1.el8_6	0:3.1.419-1.el8_6
`dotnet3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.419-1.el8_6	0:3.1.419-1.el8_6
`dotnet3.1-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.419-1.el8_6	0:3.1.419-1.el8_6
`dotnet3.1-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.419-1.el8_6	0:3.1.419-1.el8_6
`dotnet-apphost-pack-3.1-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:3.1.25-1.el8_6	0:3.1.25-1.el8_6
`dotnet-hostfxr-3.1-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:3.1.25-1.el8_6	0:3.1.25-1.el8_6
`dotnet-runtime-3.1-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:3.1.25-1.el8_6	0:3.1.25-1.el8_6
`dotnet-sdk-3.1-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:3.1.419-1.el8_6	0:3.1.419-1.el8_6
`dotnet-sdk-3.1-source-built-artifacts` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:3.1.419-1.el8_6	0:3.1.419-1.el8_6
`dotnet3.1-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:3.1.419-1.el8_6	0:3.1.419-1.el8_6
`dotnet3.1-debugsource` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 0:3.1.419-1.el8_6	0:3.1.419-1.el8_6
`aspnetcore-runtime-6.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`aspnetcore-targeting-pack-6.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`dotnet-apphost-pack-6.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`dotnet-apphost-pack-6.0-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`dotnet-host` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`dotnet-host-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`dotnet-hostfxr-6.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`dotnet-hostfxr-6.0-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`dotnet-runtime-6.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`dotnet-runtime-6.0-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`dotnet-sdk-6.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el9_0	0:6.0.105-1.el9_0
`dotnet-sdk-6.0-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el9_0	0:6.0.105-1.el9_0
`dotnet-targeting-pack-6.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`dotnet-templates-6.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el9_0	0:6.0.105-1.el9_0
`dotnet6.0` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el9_0	0:6.0.105-1.el9_0
`dotnet6.0-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el9_0	0:6.0.105-1.el9_0
`dotnet6.0-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el9_0	0:6.0.105-1.el9_0
`netstandard-targeting-pack-2.1` Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs	before 0:6.0.105-1.el9_0	0:6.0.105-1.el9_0
`dotnet-apphost-pack-6.0-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`dotnet-host-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`dotnet-hostfxr-6.0-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`dotnet-runtime-6.0-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs	before 0:6.0.5-1.el9_0	0:6.0.5-1.el9_0
`dotnet-sdk-6.0-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs	before 0:6.0.105-1.el9_0	0:6.0.105-1.el9_0
`dotnet-sdk-6.0-source-built-artifacts` Red Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs	before 0:6.0.105-1.el9_0	0:6.0.105-1.el9_0
`dotnet6.0-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs	before 0:6.0.105-1.el9_0	0:6.0.105-1.el9_0
`dotnet6.0-debugsource` Red Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs	before 0:6.0.105-1.el9_0	0:6.0.105-1.el9_0
`dotnet6.0` Rocky Linux:8 From an advisory covering 3 CVEs	before 0:6.0.105-1.el8_6	0:6.0.105-1.el8_6
`dotnet5.0` Rocky Linux:8 From an advisory covering 3 CVEs	before 0:5.0.214-1.el8_6	0:5.0.214-1.el8_6
`dotnet3.1` Rocky Linux:8 From an advisory covering 3 CVEs	before 0:3.1.419-1.el8_6	0:3.1.419-1.el8_6

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-23267 is a high vulnerability (CVSS 7.5) in Microsoft .net, published May 10, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.70%, the 93rd percentile. Fixed in Microsoft.AspNetCore.App.Runtime.linux-arm 3.1.25.

References

Show 44 moreShow less