Every CVE Search/ Get API key

CVE-2022-29117

.NET and Visual Studio Denial of Service Vulnerability

7.5 HighPublic exploitFix available

.NET and Visual Studio Denial of Service Vulnerability

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

5.73%Up 4.9 points since May 11, 2022
90%50%10%1%

What each source reports

CVE List Score used 7.5

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Record
CVE-2022-29117
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Weakness
CWE-400
Updated
2026-11-02
EUVDEUVD-2022-6471 7.5

.NET and Visual Studio Denial of Service Vulnerability

Record
EUVD-2022-6471
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Updated
2026-11-02
GitHub AdvisoriesGHSA-3rq8-h3gj-r5c6 7.5

.NET Denial of Service Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0 and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A vulnerability exists in .NET 6.0, .NET 5.0 and .NET core 3.1 where a malicious client can manipulate cookies and cause a Denial of Service.

Affected software

  • Any .NET 6.0 application running on .NET 6.0.4 or earlier.
  • Any .NET 5.0 application running .NET 5.0.16 or earlier.
  • Any .NET Core 3.1 application running on .NET Core 3.1.24 or earlier.

Affected packages

.NET Core 3.1

| Package name | Affected versions | Patched versions | |---------------------------------------------------|-------------------|------------------| | Microsoft.Owin.Security.Cookies | <4.2.2 | 4.2.2 | | Microsoft.Owin.Security | <4.2.2 | 4.2.2 | | Microsoft.AspNetCore.App.Runtime.win-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.win-x86 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.osx-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-arm64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-arm | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.win-arm64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.win-arm | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm | >=3.0.0,3.1.24 | 3.1.25 |

.NET 5.0

| Affected packages | Affected versions | Patched versions | |---------------------------------------------------|-------------------|------------------| | Microsoft.Owin.Security.Cookies | < 4.2.2 | 4.2.2 | | Microsoft.AspNetCore.App.Runtime.win-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.win-x86 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.osx-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-arm64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-arm | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.win-arm64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.win-arm | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm | >=5.0.0,5.0.16 | 5.0.17 |

.NET 6.0

| Affected packages | Affected versions | Patched versions | |---------------------------------------------------|-------------------|------------------| | Microsoft.Owin.Security.Cookies | <4.2.2 | 4.2.2 | | Microsoft.AspNetCore.App.Runtime.win-x64 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.linux-x64 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.win-x86 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.osx-x64 |…

Record
GHSA-3rq8-h3gj-r5c6
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
NVD 7.5

.NET and Visual Studio Denial of Service Vulnerability

Record
CVE-2022-29117
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-400
Updated
2026-11-02
OSV 7.5

.NET and Visual Studio Denial of Service Vulnerability

Record
CVE-2022-29117
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVGHSA-3rq8-h3gj-r5c6 7.5

.NET Denial of Service Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0 and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A vulnerability exists in .NET 6.0, .NET 5.0 and .NET core 3.1 where a malicious client can manipulate cookies and cause a Denial of Service.

Affected software

  • Any .NET 6.0 application running on .NET 6.0.4 or earlier.
  • Any .NET 5.0 application running .NET 5.0.16 or earlier.
  • Any .NET Core 3.1 application running on .NET Core 3.1.24 or earlier.

Affected packages

.NET Core 3.1

| Package name | Affected versions | Patched versions | |---------------------------------------------------|-------------------|------------------| | Microsoft.Owin.Security.Cookies | <4.2.2 | 4.2.2 | | Microsoft.Owin.Security | <4.2.2 | 4.2.2 | | Microsoft.AspNetCore.App.Runtime.win-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.win-x86 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.osx-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-arm64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-arm | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.win-arm64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.win-arm | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm | >=3.0.0,3.1.24 | 3.1.25 |

.NET 5.0

| Affected packages | Affected versions | Patched versions | |---------------------------------------------------|-------------------|------------------| | Microsoft.Owin.Security.Cookies | < 4.2.2 | 4.2.2 | | Microsoft.AspNetCore.App.Runtime.win-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.win-x86 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.osx-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-arm64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-arm | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.win-arm64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.win-arm | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm | >=5.0.0,5.0.16 | 5.0.17 |

.NET 6.0

| Affected packages | Affected versions | Patched versions | |---------------------------------------------------|-------------------|------------------| | Microsoft.Owin.Security.Cookies | <4.2.2 | 4.2.2 | | Microsoft.AspNetCore.App.Runtime.win-x64 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.linux-x64 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.win-x86 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.osx-x64 |…

Record
GHSA-3rq8-h3gj-r5c6
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
Show 15 moreShow less
OSVRHSA-2022:2194 7.5

Red Hat Security Advisory: .NET Core 3.1 on RHEL 7 security and bugfix update

Record
RHSA-2022:2194
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:2195 7.5

Red Hat Security Advisory: .NET 6.0 on RHEL 7 security and bugfix update

Record
RHSA-2022:2195
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:2196 7.5

Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update

Record
RHSA-2022:2196
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:2199 7.5

Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update

Record
RHSA-2022:2199
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:2200 7.5

Red Hat Security Advisory: .NET 5.0 security, bug fix, and enhancement update

Record
RHSA-2022:2200
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:2202 7.5

Red Hat Security Advisory: .NET Core 3.1 security, bug fix, and enhancement update

Record
RHSA-2022:2202
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:4588 7.5

Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update

Record
RHSA-2022:4588
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:2199 7.5

Important: .NET 6.0 security, bug fix, and enhancement update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 6.0.105 and .NET Core Runtime 6.0.5.

Security Fix(es):

  • dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)

  • dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)

  • dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:2199
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:2200 7.5

Important: .NET 5.0 security, bug fix, and enhancement update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 5.0.214 and .NET Core Runtime 5.0.17.

Security Fix(es):

  • dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)

  • dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)

  • dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:2200
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:2202 7.5

Important: .NET Core 3.1 security, bug fix, and enhancement update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 3.1.419 and .NET Core Runtime 3.1.25.

Security Fix(es):

  • dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)

  • dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)

  • dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:2202
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2022:2199 No score

Important: .NET 6.0 security, bug fix, and enhancement update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 6.0.105 and .NET Core Runtime 6.0.5.

Security Fix(es):

  • dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)

  • dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)

  • dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:2199
Updated
2026-11-02
OSVALSA-2022:2200 No score

Important: .NET 5.0 security, bug fix, and enhancement update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 5.0.214 and .NET Core Runtime 5.0.17.

Security Fix(es):

  • dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)

  • dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)

  • dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:2200
Updated
2026-11-02
OSVALSA-2022:2202 No score

Important: .NET Core 3.1 security, bug fix, and enhancement update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 3.1.419 and .NET Core Runtime 3.1.25.

Security Fix(es):

  • dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)

  • dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)

  • dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:2202
Updated
2026-11-02
OSVBIT-dotnet-2022-29117 No score

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Record
BIT-dotnet-2022-29117
Updated
2026-11-02
OSVBIT-dotnet-sdk-2022-29117 No score

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Record
BIT-dotnet-sdk-2022-29117
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
Microsoft.AspNetCore.App.Runtime.win-x64
NuGet
 3.0.0 to 3.1.24
3.1.25
Microsoft.AspNetCore.App.Runtime.win-x64
NuGet
 5.0.0 to 5.0.16
5.0.17
Microsoft.AspNetCore.App.Runtime.win-x64
NuGet
 6.0.0 to 6.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.linux-x64
NuGet
 3.0.0 to 3.1.24
3.1.25
Microsoft.AspNetCore.App.Runtime.linux-x64
NuGet
 5.0.0 to 5.0.16
5.0.17
Microsoft.AspNetCore.App.Runtime.linux-x64
NuGet
 6.0.0 to 6.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.win-x86
NuGet
 3.0.0 to 3.1.24
3.1.25
Microsoft.AspNetCore.App.Runtime.win-x86
NuGet
 5.0.0 to 5.0.16
5.0.17
Microsoft.AspNetCore.App.Runtime.win-x86
NuGet
 6.0.0 to 6.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.osx-x64
NuGet
 3.0.0 to 3.1.24
3.1.25
Show 233 moreShow less
Affected packages
PackageAffectedFixed
Microsoft.AspNetCore.App.Runtime.osx-x64
NuGet
 5.0.0 to 5.0.16
5.0.17
Microsoft.AspNetCore.App.Runtime.osx-x64
NuGet
 6.0.0 to 6.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
NuGet
 3.0.0 to 3.1.24
3.1.25
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
NuGet
 5.0.0 to 5.0.16
5.0.17
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
NuGet
 6.0.0 to 6.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.linux-arm64
NuGet
 3.0.0 to 3.1.24
3.1.25
Microsoft.AspNetCore.App.Runtime.linux-arm64
NuGet
 5.0.0 to 5.0.16
5.0.17
Microsoft.AspNetCore.App.Runtime.linux-arm64
NuGet
 6.0.0 to 6.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.linux-arm
NuGet
 3.0.0 to 3.1.24
3.1.25
Microsoft.AspNetCore.App.Runtime.linux-arm
NuGet
 5.0.0 to 5.0.16
5.0.17
Microsoft.AspNetCore.App.Runtime.linux-arm
NuGet
 6.0.0 to 6.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.win-arm64
NuGet
 3.0.0 to 3.1.24
3.1.25
Microsoft.AspNetCore.App.Runtime.win-arm64
NuGet
 5.0.0 to 5.0.16
5.0.17
Microsoft.AspNetCore.App.Runtime.win-arm64
NuGet
 6.0.0 to 6.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.win-arm
NuGet
 3.0.0 to 3.1.24
3.1.25
Microsoft.AspNetCore.App.Runtime.win-arm
NuGet
 5.0.0 to 5.0.16
5.0.17
Microsoft.AspNetCore.App.Runtime.win-arm
NuGet
 6.0.0 to 6.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
NuGet
 3.0.0 to 3.1.24
3.1.25
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
NuGet
 5.0.0 to 5.0.16
5.0.17
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
NuGet
 6.0.0 to 6.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.linux-musl-arm
NuGet
 3.0.0 to 3.1.24
3.1.25
Microsoft.AspNetCore.App.Runtime.linux-musl-arm
NuGet
 5.0.0 to 5.0.16
5.0.17
Microsoft.AspNetCore.App.Runtime.linux-musl-arm
NuGet
 6.0.0 to 6.0.4
6.0.5
Microsoft.Owin.Security.Cookies
NuGet
 before 4.2.2
4.2.2
Microsoft.Owin
NuGet
 before 4.2.2
4.2.2
Microsoft.AspNetCore.App.Runtime.osx-arm64
NuGet
 6.0.0 up to 6.0.5
6.0.5
aspnetcore-runtime-6.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 6.0.5-1.el8_6
6.0.5-1.el8_6
aspnetcore-targeting-pack-6.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 6.0.5-1.el8_6
6.0.5-1.el8_6
dotnet
AlmaLinux:8
From an advisory covering 3 CVEs
 before 6.0.105-1.el8_6
6.0.105-1.el8_6
dotnet-apphost-pack-6.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 6.0.5-1.el8_6
6.0.5-1.el8_6
dotnet-host
AlmaLinux:8
From an advisory covering 3 CVEs
 before 6.0.5-1.el8_6
6.0.5-1.el8_6
dotnet-hostfxr-6.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 6.0.5-1.el8_6
6.0.5-1.el8_6
dotnet-runtime-6.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 6.0.5-1.el8_6
6.0.5-1.el8_6
dotnet-sdk-6.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 6.0.105-1.el8_6
6.0.105-1.el8_6
dotnet-sdk-6.0-source-built-artifacts
AlmaLinux:8
From an advisory covering 3 CVEs
 before 6.0.105-1.el8_6
6.0.105-1.el8_6
dotnet-targeting-pack-6.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 6.0.5-1.el8_6
6.0.5-1.el8_6
dotnet-templates-6.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 6.0.105-1.el8_6
6.0.105-1.el8_6
netstandard-targeting-pack-2.1
AlmaLinux:8
From an advisory covering 3 CVEs
 before 6.0.105-1.el8_6
6.0.105-1.el8_6
aspnetcore-runtime-5.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.0.17-1.el8_6
5.0.17-1.el8_6
aspnetcore-targeting-pack-5.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.0.17-1.el8_6
5.0.17-1.el8_6
dotnet-apphost-pack-5.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.0.17-1.el8_6
5.0.17-1.el8_6
dotnet-hostfxr-5.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.0.17-1.el8_6
5.0.17-1.el8_6
dotnet-runtime-5.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.0.17-1.el8_6
5.0.17-1.el8_6
dotnet-sdk-5.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.0.214-1.el8_6
5.0.214-1.el8_6
dotnet-sdk-5.0-source-built-artifacts
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.0.214-1.el8_6
5.0.214-1.el8_6
dotnet-targeting-pack-5.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.0.17-1.el8_6
5.0.17-1.el8_6
dotnet-templates-5.0
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.0.214-1.el8_6
5.0.214-1.el8_6
aspnetcore-runtime-3.1
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.1.25-1.el8_6
3.1.25-1.el8_6
aspnetcore-targeting-pack-3.1
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.1.25-1.el8_6
3.1.25-1.el8_6
dotnet-apphost-pack-3.1
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.1.25-1.el8_6
3.1.25-1.el8_6
dotnet-hostfxr-3.1
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.1.25-1.el8_6
3.1.25-1.el8_6
dotnet-runtime-3.1
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.1.25-1.el8_6
3.1.25-1.el8_6
dotnet-sdk-3.1
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.1.419-1.el8_6
3.1.419-1.el8_6
dotnet-sdk-3.1-source-built-artifacts
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.1.419-1.el8_6
3.1.419-1.el8_6
dotnet-targeting-pack-3.1
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.1.25-1.el8_6
3.1.25-1.el8_6
dotnet-templates-3.1
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.1.419-1.el8_6
3.1.419-1.el8_6
dotnet
Bitnami
 5.0.0 up to 5.0.1, 6.0.0 up to 6.0.1
5.0.16.0.1
dotnet-sdk
Bitnami
 5.0.0 up to 5.0.1, 6.0.0 up to 6.0.1
5.0.16.0.1
Microsoft.AspNetCore.App.Runtime.win-x64
NuGet
 3.0.0 up to 3.1.25, plus listed versions
3.0.13.0.23.0.33.1.03.1.1
Show 23 moreShow less
3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9
3.1.25
Microsoft.Owin.Security.Cookies
NuGet
 before 4.2.2, plus listed versions
2.0.02.0.0-rc12.0.12.0.22.1.0
Show 17 moreShow less
2.1.0-rc13.0.03.0.0-alpha13.0.0-beta13.0.0-rc13.0.0-rc23.0.13.1.03.1.0-rc14.0.04.0.0-alpha14.0.0-preview14.0.14.1.04.1.14.2.04.2.1
4.2.2
Microsoft.AspNetCore.App.Runtime.win-x64
NuGet
 5.0.0 up to 5.0.17, plus listed versions
5.0.15.0.105.0.115.0.125.0.13
Show 11 moreShow less
5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9
5.0.17
Microsoft.Owin
NuGet
 before 4.2.2, plus listed versions
1.1.0-beta11.1.0-beta22.0.02.0.0-rc12.0.1
Show 19 moreShow less
2.0.22.1.02.1.0-rc13.0.03.0.0-alpha13.0.0-beta13.0.0-rc13.0.0-rc23.0.13.1.03.1.0-rc14.0.04.0.0-alpha14.0.0-preview14.0.14.1.04.1.14.2.04.2.1
4.2.2
Microsoft.AspNetCore.App.Runtime.win-x64
NuGet
 6.0.0 up to 6.0.5, plus listed versions
6.0.16.0.26.0.36.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.linux-x64
NuGet
 3.0.0 up to 3.1.25, plus listed versions
3.0.13.0.23.0.33.1.03.1.1
Show 23 moreShow less
3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9
3.1.25
Microsoft.AspNetCore.App.Runtime.linux-x64
NuGet
 5.0.0 up to 5.0.17, plus listed versions
5.0.15.0.105.0.115.0.125.0.13
Show 11 moreShow less
5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9
5.0.17
Microsoft.AspNetCore.App.Runtime.linux-x64
NuGet
 6.0.0 up to 6.0.5, plus listed versions
6.0.16.0.26.0.36.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.win-x86
NuGet
 3.0.0 up to 3.1.25, plus listed versions
3.0.13.0.23.0.33.1.03.1.1
Show 23 moreShow less
3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9
3.1.25
Microsoft.AspNetCore.App.Runtime.win-x86
NuGet
 5.0.0 up to 5.0.17, plus listed versions
5.0.15.0.105.0.115.0.125.0.13
Show 11 moreShow less
5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9
5.0.17
Microsoft.AspNetCore.App.Runtime.win-x86
NuGet
 6.0.0 up to 6.0.5, plus listed versions
6.0.16.0.26.0.36.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.osx-x64
NuGet
 3.0.0 up to 3.1.25, plus listed versions
3.0.13.0.23.0.33.1.03.1.1
Show 23 moreShow less
3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9
3.1.25
Microsoft.AspNetCore.App.Runtime.osx-x64
NuGet
 5.0.0 up to 5.0.17, plus listed versions
5.0.15.0.105.0.115.0.125.0.13
Show 11 moreShow less
5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9
5.0.17
Microsoft.AspNetCore.App.Runtime.osx-x64
NuGet
 6.0.0 up to 6.0.5, plus listed versions
6.0.16.0.26.0.36.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
NuGet
 3.0.0 up to 3.1.25, plus listed versions
3.0.13.0.23.0.33.1.03.1.1
Show 23 moreShow less
3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9
3.1.25
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
NuGet
 5.0.0 up to 5.0.17, plus listed versions
5.0.15.0.105.0.115.0.125.0.13
Show 11 moreShow less
5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9
5.0.17
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
NuGet
 6.0.0 up to 6.0.5, plus listed versions
6.0.16.0.26.0.36.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.linux-arm64
NuGet
 3.0.0 up to 3.1.25, plus listed versions
3.0.13.0.23.0.33.1.03.1.1
Show 23 moreShow less
3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9
3.1.25
Microsoft.AspNetCore.App.Runtime.linux-arm64
NuGet
 5.0.0 up to 5.0.17, plus listed versions
5.0.15.0.105.0.115.0.125.0.13
Show 11 moreShow less
5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9
5.0.17
Microsoft.AspNetCore.App.Runtime.linux-arm64
NuGet
 6.0.0 up to 6.0.5, plus listed versions
6.0.16.0.26.0.36.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.linux-arm
NuGet
 3.0.0 up to 3.1.25, plus listed versions
3.0.13.0.23.0.33.1.03.1.1
Show 23 moreShow less
3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9
3.1.25
Microsoft.AspNetCore.App.Runtime.linux-arm
NuGet
 5.0.0 up to 5.0.17, plus listed versions
5.0.15.0.105.0.115.0.125.0.13
Show 11 moreShow less
5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9
5.0.17
Microsoft.AspNetCore.App.Runtime.linux-arm
NuGet
 6.0.0 up to 6.0.5, plus listed versions
6.0.16.0.26.0.36.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.win-arm64
NuGet
 3.0.0 up to 3.1.25, plus listed versions
3.1.103.1.113.1.123.1.133.1.14
Show 15 moreShow less
3.1.153.1.163.1.173.1.183.1.193.1.203.1.213.1.223.1.233.1.243.1.53.1.63.1.73.1.83.1.9
3.1.25
Microsoft.AspNetCore.App.Runtime.win-arm64
NuGet
 5.0.0 up to 5.0.17, plus listed versions
5.0.15.0.105.0.115.0.125.0.13
Show 11 moreShow less
5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9
5.0.17
Microsoft.AspNetCore.App.Runtime.win-arm64
NuGet
 6.0.0 up to 6.0.5, plus listed versions
6.0.16.0.26.0.36.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.win-arm
NuGet
 3.0.0 up to 3.1.25, plus listed versions
3.0.13.0.23.0.33.1.03.1.1
Show 23 moreShow less
3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9
3.1.25
Microsoft.AspNetCore.App.Runtime.win-arm
NuGet
 5.0.0 up to 5.0.17, plus listed versions
5.0.15.0.105.0.115.0.125.0.13
Show 11 moreShow less
5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9
5.0.17
Microsoft.AspNetCore.App.Runtime.win-arm
NuGet
 6.0.0 up to 6.0.5, plus listed versions
6.0.16.0.26.0.36.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
NuGet
 3.0.0 up to 3.1.25, plus listed versions
3.0.13.0.23.0.33.1.03.1.1
Show 23 moreShow less
3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9
3.1.25
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
NuGet
 5.0.0 up to 5.0.17, plus listed versions
5.0.15.0.105.0.115.0.125.0.13
Show 11 moreShow less
5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9
5.0.17
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
NuGet
 6.0.0 up to 6.0.5, plus listed versions
6.0.16.0.26.0.36.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.linux-musl-arm
NuGet
 3.0.0 up to 3.1.25
3.1.25
Microsoft.AspNetCore.App.Runtime.linux-musl-arm
NuGet
 5.0.0 up to 5.0.17, plus listed versions
5.0.15.0.105.0.115.0.125.0.13
Show 11 moreShow less
5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9
5.0.17
Microsoft.AspNetCore.App.Runtime.linux-musl-arm
NuGet
 6.0.0 up to 6.0.5, plus listed versions
6.0.16.0.26.0.36.0.4
6.0.5
Microsoft.AspNetCore.App.Runtime.osx-arm64
NuGet
 6.0.0 up to 6.0.5, plus listed versions
6.0.16.0.26.0.36.0.4
6.0.5
rh-dotnet31-aspnetcore-runtime-3.1
Red Hat:rhel_dotnet:3.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el7_9
0:3.1.25-1.el7_9
rh-dotnet31-aspnetcore-targeting-pack-3.1
Red Hat:rhel_dotnet:3.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el7_9
0:3.1.25-1.el7_9
rh-dotnet31-dotnet
Red Hat:rhel_dotnet:3.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el7_9
0:3.1.419-1.el7_9
rh-dotnet31-dotnet-apphost-pack-3.1
Red Hat:rhel_dotnet:3.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el7_9
0:3.1.25-1.el7_9
rh-dotnet31-dotnet-debuginfo
Red Hat:rhel_dotnet:3.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el7_9
0:3.1.419-1.el7_9
rh-dotnet31-dotnet-host
Red Hat:rhel_dotnet:3.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el7_9
0:3.1.25-1.el7_9
rh-dotnet31-dotnet-hostfxr-3.1
Red Hat:rhel_dotnet:3.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el7_9
0:3.1.25-1.el7_9
rh-dotnet31-dotnet-runtime-3.1
Red Hat:rhel_dotnet:3.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el7_9
0:3.1.25-1.el7_9
rh-dotnet31-dotnet-sdk-3.1
Red Hat:rhel_dotnet:3.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el7_9
0:3.1.419-1.el7_9
rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts
Red Hat:rhel_dotnet:3.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el7_9
0:3.1.419-1.el7_9
rh-dotnet31-dotnet-targeting-pack-3.1
Red Hat:rhel_dotnet:3.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el7_9
0:3.1.25-1.el7_9
rh-dotnet31-dotnet-templates-3.1
Red Hat:rhel_dotnet:3.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el7_9
0:3.1.419-1.el7_9
rh-dotnet31-netstandard-targeting-pack-2.1
Red Hat:rhel_dotnet:3.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el7_9
0:3.1.419-1.el7_9
rh-dotnet60-aspnetcore-runtime-6.0
Red Hat:rhel_dotnet:6.0::el7
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el7_9
0:6.0.5-1.el7_9
rh-dotnet60-aspnetcore-targeting-pack-6.0
Red Hat:rhel_dotnet:6.0::el7
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el7_9
0:6.0.5-1.el7_9
rh-dotnet60-dotnet
Red Hat:rhel_dotnet:6.0::el7
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el7_9
0:6.0.105-1.el7_9
rh-dotnet60-dotnet-apphost-pack-6.0
Red Hat:rhel_dotnet:6.0::el7
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el7_9
0:6.0.5-1.el7_9
rh-dotnet60-dotnet-debuginfo
Red Hat:rhel_dotnet:6.0::el7
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el7_9
0:6.0.105-1.el7_9
rh-dotnet60-dotnet-host
Red Hat:rhel_dotnet:6.0::el7
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el7_9
0:6.0.5-1.el7_9
rh-dotnet60-dotnet-hostfxr-6.0
Red Hat:rhel_dotnet:6.0::el7
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el7_9
0:6.0.5-1.el7_9
rh-dotnet60-dotnet-runtime-6.0
Red Hat:rhel_dotnet:6.0::el7
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el7_9
0:6.0.5-1.el7_9
rh-dotnet60-dotnet-sdk-6.0
Red Hat:rhel_dotnet:6.0::el7
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el7_9
0:6.0.105-1.el7_9
rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts
Red Hat:rhel_dotnet:6.0::el7
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el7_9
0:6.0.105-1.el7_9
rh-dotnet60-dotnet-targeting-pack-6.0
Red Hat:rhel_dotnet:6.0::el7
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el7_9
0:6.0.5-1.el7_9
rh-dotnet60-dotnet-templates-6.0
Red Hat:rhel_dotnet:6.0::el7
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el7_9
0:6.0.105-1.el7_9
rh-dotnet60-netstandard-targeting-pack-2.1
Red Hat:rhel_dotnet:6.0::el7
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el7_9
0:6.0.105-1.el7_9
rh-dotnet50-aspnetcore-runtime-5.0
Red Hat:rhel_dotnet:5.0::el7
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el7_9
0:5.0.17-1.el7_9
rh-dotnet50-aspnetcore-targeting-pack-5.0
Red Hat:rhel_dotnet:5.0::el7
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el7_9
0:5.0.17-1.el7_9
rh-dotnet50-dotnet
Red Hat:rhel_dotnet:5.0::el7
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el7_9
0:5.0.214-1.el7_9
rh-dotnet50-dotnet-apphost-pack-5.0
Red Hat:rhel_dotnet:5.0::el7
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el7_9
0:5.0.17-1.el7_9
rh-dotnet50-dotnet-debuginfo
Red Hat:rhel_dotnet:5.0::el7
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el7_9
0:5.0.214-1.el7_9
rh-dotnet50-dotnet-host
Red Hat:rhel_dotnet:5.0::el7
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el7_9
0:5.0.17-1.el7_9
rh-dotnet50-dotnet-hostfxr-5.0
Red Hat:rhel_dotnet:5.0::el7
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el7_9
0:5.0.17-1.el7_9
rh-dotnet50-dotnet-runtime-5.0
Red Hat:rhel_dotnet:5.0::el7
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el7_9
0:5.0.17-1.el7_9
rh-dotnet50-dotnet-sdk-5.0
Red Hat:rhel_dotnet:5.0::el7
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el7_9
0:5.0.214-1.el7_9
rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts
Red Hat:rhel_dotnet:5.0::el7
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el7_9
0:5.0.214-1.el7_9
rh-dotnet50-dotnet-targeting-pack-5.0
Red Hat:rhel_dotnet:5.0::el7
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el7_9
0:5.0.17-1.el7_9
rh-dotnet50-dotnet-templates-5.0
Red Hat:rhel_dotnet:5.0::el7
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el7_9
0:5.0.214-1.el7_9
rh-dotnet50-netstandard-targeting-pack-2.1
Red Hat:rhel_dotnet:5.0::el7
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el7_9
0:5.0.214-1.el7_9
aspnetcore-runtime-6.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
aspnetcore-targeting-pack-6.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
dotnet
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el8_6
0:6.0.105-1.el8_6
dotnet-apphost-pack-6.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
dotnet-apphost-pack-6.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
dotnet-host
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
dotnet-host-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
dotnet-hostfxr-6.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
dotnet-hostfxr-6.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
dotnet-runtime-6.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
dotnet-runtime-6.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
dotnet-sdk-6.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el8_6
0:6.0.105-1.el8_6
dotnet-sdk-6.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el8_6
0:6.0.105-1.el8_6
dotnet-targeting-pack-6.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
dotnet-templates-6.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el8_6
0:6.0.105-1.el8_6
dotnet6.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el8_6
0:6.0.105-1.el8_6
dotnet6.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el8_6
0:6.0.105-1.el8_6
dotnet6.0-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el8_6
0:6.0.105-1.el8_6
netstandard-targeting-pack-2.1
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el8_6
0:6.0.105-1.el8_6
dotnet-apphost-pack-6.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
dotnet-host-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
dotnet-hostfxr-6.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
dotnet-runtime-6.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el8_6
0:6.0.5-1.el8_6
dotnet-sdk-6.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el8_6
0:6.0.105-1.el8_6
dotnet-sdk-6.0-source-built-artifacts
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el8_6
0:6.0.105-1.el8_6
dotnet6.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el8_6
0:6.0.105-1.el8_6
dotnet6.0-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el8_6
0:6.0.105-1.el8_6
aspnetcore-runtime-5.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el8_6
0:5.0.17-1.el8_6
aspnetcore-targeting-pack-5.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el8_6
0:5.0.17-1.el8_6
dotnet-apphost-pack-5.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el8_6
0:5.0.17-1.el8_6
dotnet-apphost-pack-5.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el8_6
0:5.0.17-1.el8_6
dotnet-hostfxr-5.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el8_6
0:5.0.17-1.el8_6
dotnet-hostfxr-5.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el8_6
0:5.0.17-1.el8_6
dotnet-runtime-5.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el8_6
0:5.0.17-1.el8_6
dotnet-runtime-5.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el8_6
0:5.0.17-1.el8_6
dotnet-sdk-5.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el8_6
0:5.0.214-1.el8_6
dotnet-sdk-5.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el8_6
0:5.0.214-1.el8_6
dotnet-targeting-pack-5.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el8_6
0:5.0.17-1.el8_6
dotnet-templates-5.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el8_6
0:5.0.214-1.el8_6
dotnet5.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el8_6
0:5.0.214-1.el8_6
dotnet5.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el8_6
0:5.0.214-1.el8_6
dotnet5.0-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el8_6
0:5.0.214-1.el8_6
dotnet-apphost-pack-5.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el8_6
0:5.0.17-1.el8_6
dotnet-hostfxr-5.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el8_6
0:5.0.17-1.el8_6
dotnet-runtime-5.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:5.0.17-1.el8_6
0:5.0.17-1.el8_6
dotnet-sdk-5.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el8_6
0:5.0.214-1.el8_6
dotnet-sdk-5.0-source-built-artifacts
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el8_6
0:5.0.214-1.el8_6
dotnet5.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el8_6
0:5.0.214-1.el8_6
dotnet5.0-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el8_6
0:5.0.214-1.el8_6
aspnetcore-runtime-3.1
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el8_6
0:3.1.25-1.el8_6
aspnetcore-targeting-pack-3.1
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el8_6
0:3.1.25-1.el8_6
dotnet-apphost-pack-3.1
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el8_6
0:3.1.25-1.el8_6
dotnet-apphost-pack-3.1-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el8_6
0:3.1.25-1.el8_6
dotnet-hostfxr-3.1
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el8_6
0:3.1.25-1.el8_6
dotnet-hostfxr-3.1-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el8_6
0:3.1.25-1.el8_6
dotnet-runtime-3.1
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el8_6
0:3.1.25-1.el8_6
dotnet-runtime-3.1-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el8_6
0:3.1.25-1.el8_6
dotnet-sdk-3.1
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el8_6
0:3.1.419-1.el8_6
dotnet-sdk-3.1-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el8_6
0:3.1.419-1.el8_6
dotnet-targeting-pack-3.1
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el8_6
0:3.1.25-1.el8_6
dotnet-templates-3.1
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el8_6
0:3.1.419-1.el8_6
dotnet3.1
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el8_6
0:3.1.419-1.el8_6
dotnet3.1-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el8_6
0:3.1.419-1.el8_6
dotnet3.1-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el8_6
0:3.1.419-1.el8_6
dotnet-apphost-pack-3.1-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el8_6
0:3.1.25-1.el8_6
dotnet-hostfxr-3.1-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el8_6
0:3.1.25-1.el8_6
dotnet-runtime-3.1-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:3.1.25-1.el8_6
0:3.1.25-1.el8_6
dotnet-sdk-3.1-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el8_6
0:3.1.419-1.el8_6
dotnet-sdk-3.1-source-built-artifacts
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el8_6
0:3.1.419-1.el8_6
dotnet3.1-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el8_6
0:3.1.419-1.el8_6
dotnet3.1-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el8_6
0:3.1.419-1.el8_6
aspnetcore-runtime-6.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
aspnetcore-targeting-pack-6.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
dotnet-apphost-pack-6.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
dotnet-apphost-pack-6.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
dotnet-host
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
dotnet-host-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
dotnet-hostfxr-6.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
dotnet-hostfxr-6.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
dotnet-runtime-6.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
dotnet-runtime-6.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
dotnet-sdk-6.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el9_0
0:6.0.105-1.el9_0
dotnet-sdk-6.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el9_0
0:6.0.105-1.el9_0
dotnet-targeting-pack-6.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
dotnet-templates-6.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el9_0
0:6.0.105-1.el9_0
dotnet6.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el9_0
0:6.0.105-1.el9_0
dotnet6.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el9_0
0:6.0.105-1.el9_0
dotnet6.0-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el9_0
0:6.0.105-1.el9_0
netstandard-targeting-pack-2.1
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el9_0
0:6.0.105-1.el9_0
dotnet-apphost-pack-6.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
dotnet-host-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
dotnet-hostfxr-6.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
dotnet-runtime-6.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:6.0.5-1.el9_0
0:6.0.5-1.el9_0
dotnet-sdk-6.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el9_0
0:6.0.105-1.el9_0
dotnet-sdk-6.0-source-built-artifacts
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el9_0
0:6.0.105-1.el9_0
dotnet6.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el9_0
0:6.0.105-1.el9_0
dotnet6.0-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el9_0
0:6.0.105-1.el9_0
dotnet6.0
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:6.0.105-1.el8_6
0:6.0.105-1.el8_6
dotnet5.0
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:5.0.214-1.el8_6
0:5.0.214-1.el8_6
dotnet3.1
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:3.1.419-1.el8_6
0:3.1.419-1.el8_6

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubCharanMv08/cve-2022-29117-assessment2026-08-31

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-29117 is a high vulnerability (CVSS 7.5) in Microsoft .net, published May 10, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.73%, the 93rd percentile. Fixed in Microsoft.AspNetCore.App.Runtime.win-x64 3.1.25.

References

Show 44 moreShow less
This page doesn't list everything

Left out here: the rest of 2 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open