CVE-2022-29145
.NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
.NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
- Record
CVE-2022-29145- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C - Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2022-6549
.NET and Visual Studio Denial of Service Vulnerability
- Record
EUVD-2022-6549- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-fcg8-mg9g-6hc4
.NET Denial of Service Vulnerability
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0 and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
A vulnerability exists in .NET 6.0, .NET 5.0 and .NET core 3.1 where a malicious client can can cause a denial of service when HTML forms are parsed.
Affected software
- Any .NET 6.0 application running on .NET 6.0.4 or earlier.
- Any .NET 5.0 application running .NET 5.0.16 or earlier.
- Any .NET Core 3.1 application running on .NET Core 3.1.24 or earlier.
Affected packages
.NET Core 3.1
| Package name | Affected version | Patched version | |---------------------------------------------------|---------------------|---------------| | Microsoft.AspNetCore.App.Runtime.win-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.win-x86 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.osx-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-arm64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-arm | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.win-arm64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.win-arm | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm | >=3.0.0,3.1.24 | 3.1.25 |
.NET 5.0
| Package name | Affected version | Patched version | |---------------------------------------------------|---------------------|---------------| | Microsoft.AspNetCore.App.Runtime.win-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.win-x86 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.osx-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-arm64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-arm | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.win-arm64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.win-arm | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm | >=5.0.0,5.0.16 | 5.0.17 |
.NET 6.0
| Package name | Affected version | Patched version | |---------------------------------------------------|---------------------|---------------| | Microsoft.AspNetCore.App.Runtime.win-x64 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.linux-x64 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.win-x86 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.osx-x64 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.linux-arm64 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.linux-arm | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.win-arm64 | >=6.0.0,6.0.4 | 6.0.5 | |…
- Record
GHSA-fcg8-mg9g-6hc4- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD
.NET and Visual Studio Denial of Service Vulnerability
- Record
CVE-2022-29145- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-400
- Updated
- 2026-11-02
OSV
.NET and Visual Studio Denial of Service Vulnerability
- Record
CVE-2022-29145- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVGHSA-fcg8-mg9g-6hc4
.NET Denial of Service Vulnerability
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0 and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
A vulnerability exists in .NET 6.0, .NET 5.0 and .NET core 3.1 where a malicious client can can cause a denial of service when HTML forms are parsed.
Affected software
- Any .NET 6.0 application running on .NET 6.0.4 or earlier.
- Any .NET 5.0 application running .NET 5.0.16 or earlier.
- Any .NET Core 3.1 application running on .NET Core 3.1.24 or earlier.
Affected packages
.NET Core 3.1
| Package name | Affected version | Patched version | |---------------------------------------------------|---------------------|---------------| | Microsoft.AspNetCore.App.Runtime.win-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.win-x86 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.osx-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-arm64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-arm | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.win-arm64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.win-arm | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | >=3.0.0,3.1.24 | 3.1.25 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm | >=3.0.0,3.1.24 | 3.1.25 |
.NET 5.0
| Package name | Affected version | Patched version | |---------------------------------------------------|---------------------|---------------| | Microsoft.AspNetCore.App.Runtime.win-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.win-x86 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.osx-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-arm64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-arm | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.win-arm64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.win-arm | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | >=5.0.0,5.0.16 | 5.0.17 | | Microsoft.AspNetCore.App.Runtime.linux-musl-arm | >=5.0.0,5.0.16 | 5.0.17 |
.NET 6.0
| Package name | Affected version | Patched version | |---------------------------------------------------|---------------------|---------------| | Microsoft.AspNetCore.App.Runtime.win-x64 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.linux-x64 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.win-x86 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.osx-x64 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.linux-arm64 | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.linux-arm | >=6.0.0,6.0.4 | 6.0.5 | | Microsoft.AspNetCore.App.Runtime.win-arm64 | >=6.0.0,6.0.4 | 6.0.5 | |…
- Record
GHSA-fcg8-mg9g-6hc4- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
Show 15 moreShow less
OSVRHSA-2022:2194
Red Hat Security Advisory: .NET Core 3.1 on RHEL 7 security and bugfix update
- Record
RHSA-2022:2194- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:2195
Red Hat Security Advisory: .NET 6.0 on RHEL 7 security and bugfix update
- Record
RHSA-2022:2195- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:2196
Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update
- Record
RHSA-2022:2196- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:2199
Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update
- Record
RHSA-2022:2199- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:2200
Red Hat Security Advisory: .NET 5.0 security, bug fix, and enhancement update
- Record
RHSA-2022:2200- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:2202
Red Hat Security Advisory: .NET Core 3.1 security, bug fix, and enhancement update
- Record
RHSA-2022:2202- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:4588
Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update
- Record
RHSA-2022:4588- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2022:2199
Important: .NET 6.0 security, bug fix, and enhancement update
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 6.0.105 and .NET Core Runtime 6.0.5.
Security Fix(es):
-
dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)
-
dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)
-
dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2022:2199- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2022:2200
Important: .NET 5.0 security, bug fix, and enhancement update
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 5.0.214 and .NET Core Runtime 5.0.17.
Security Fix(es):
-
dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)
-
dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)
-
dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2022:2200- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2022:2202
Important: .NET Core 3.1 security, bug fix, and enhancement update
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 3.1.419 and .NET Core Runtime 3.1.25.
Security Fix(es):
-
dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)
-
dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)
-
dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2022:2202- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2022:2199 No score
Important: .NET 6.0 security, bug fix, and enhancement update
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 6.0.105 and .NET Core Runtime 6.0.5.
Security Fix(es):
-
dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)
-
dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)
-
dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2022:2199- Updated
- 2026-11-02
OSVALSA-2022:2200 No score
Important: .NET 5.0 security, bug fix, and enhancement update
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 5.0.214 and .NET Core Runtime 5.0.17.
Security Fix(es):
-
dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)
-
dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)
-
dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2022:2200- Updated
- 2026-11-02
OSVALSA-2022:2202 No score
Important: .NET Core 3.1 security, bug fix, and enhancement update
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 3.1.419 and .NET Core Runtime 3.1.25.
Security Fix(es):
-
dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)
-
dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)
-
dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2022:2202- Updated
- 2026-11-02
OSVBIT-dotnet-2022-29145 No score
.NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
- Record
BIT-dotnet-2022-29145- Updated
- 2026-11-02
OSVBIT-dotnet-sdk-2022-29145 No score
.NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
- Record
BIT-dotnet-sdk-2022-29145- Updated
- 2026-11-02
Affected products
- microsoft .net
- microsoft .net 5.0
- microsoft .net 6.0
- microsoft .net core 3.1
- microsoft .net core
- microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)
- microsoft visual studio 2019 version 16.9 (includes 16.0 - 16.8)
- microsoft visual studio 2022 version 17.0
- microsoft visual studio 2022 version 17.1
- microsoft visual studio 2019
- microsoft visual studio 2022
- fedoraproject fedora
Affected packages
| Package | Affected | Fixed |
|---|---|---|
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
3.0.0 up to 3.1.25 | 3.1.25 |
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
5.0.0 up to 5.0.17 | 5.0.17 |
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
6.0.0 up to 6.0.5 | 6.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
3.0.0 up to 3.1.25 | 3.1.25 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
5.0.0 up to 5.0.17 | 5.0.17 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
6.0.0 up to 6.0.5 | 6.0.5 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
3.0.0 up to 3.1.25 | 3.1.25 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
5.0.0 up to 5.0.17 | 5.0.17 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
6.0.0 up to 6.0.5 | 6.0.5 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
3.0.0 up to 3.1.25 | 3.1.25 |
Show 226 moreShow less
| Package | Affected | Fixed |
|---|---|---|
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
5.0.0 up to 5.0.17 | 5.0.17 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
6.0.0 up to 6.0.5 | 6.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
3.0.0 up to 3.1.25 | 3.1.25 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
5.0.0 up to 5.0.17 | 5.0.17 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
6.0.0 up to 6.0.5 | 6.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
3.0.0 up to 3.1.25 | 3.1.25 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
5.0.0 up to 5.0.17 | 5.0.17 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
6.0.0 up to 6.0.5 | 6.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
3.0.0 up to 3.1.25 | 3.1.25 |
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
5.0.0 up to 5.0.17 | 5.0.17 |
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
6.0.0 up to 6.0.5 | 6.0.5 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
3.0.0 up to 3.1.25 | 3.1.25 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
5.0.0 up to 5.0.17 | 5.0.17 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
6.0.0 up to 6.0.5 | 6.0.5 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
3.0.0 up to 3.1.25 | 3.1.25 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
5.0.0 up to 5.0.17 | 5.0.17 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
6.0.0 up to 6.0.5 | 6.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
3.0.0 up to 3.1.25 | 3.1.25 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
5.0.0 up to 5.0.17 | 5.0.17 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
6.0.0 up to 6.0.5 | 6.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet |
3.0.0 up to 3.1.25 | 3.1.25 |
Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet |
5.0.0 up to 5.0.17 | 5.0.17 |
Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet |
6.0.0 up to 6.0.5 | 6.0.5 |
aspnetcore-runtime-6.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 6.0.5-1.el8_6 | 6.0.5-1.el8_6 |
aspnetcore-targeting-pack-6.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 6.0.5-1.el8_6 | 6.0.5-1.el8_6 |
dotnetAlmaLinux:8 From an advisory covering 3 CVEs |
before 6.0.105-1.el8_6 | 6.0.105-1.el8_6 |
dotnet-apphost-pack-6.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 6.0.5-1.el8_6 | 6.0.5-1.el8_6 |
dotnet-hostAlmaLinux:8 From an advisory covering 3 CVEs |
before 6.0.5-1.el8_6 | 6.0.5-1.el8_6 |
dotnet-hostfxr-6.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 6.0.5-1.el8_6 | 6.0.5-1.el8_6 |
dotnet-runtime-6.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 6.0.5-1.el8_6 | 6.0.5-1.el8_6 |
dotnet-sdk-6.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 6.0.105-1.el8_6 | 6.0.105-1.el8_6 |
dotnet-sdk-6.0-source-built-artifactsAlmaLinux:8 From an advisory covering 3 CVEs |
before 6.0.105-1.el8_6 | 6.0.105-1.el8_6 |
dotnet-targeting-pack-6.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 6.0.5-1.el8_6 | 6.0.5-1.el8_6 |
dotnet-templates-6.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 6.0.105-1.el8_6 | 6.0.105-1.el8_6 |
netstandard-targeting-pack-2.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 6.0.105-1.el8_6 | 6.0.105-1.el8_6 |
aspnetcore-runtime-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.17-1.el8_6 | 5.0.17-1.el8_6 |
aspnetcore-targeting-pack-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.17-1.el8_6 | 5.0.17-1.el8_6 |
dotnet-apphost-pack-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.17-1.el8_6 | 5.0.17-1.el8_6 |
dotnet-hostfxr-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.17-1.el8_6 | 5.0.17-1.el8_6 |
dotnet-runtime-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.17-1.el8_6 | 5.0.17-1.el8_6 |
dotnet-sdk-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.214-1.el8_6 | 5.0.214-1.el8_6 |
dotnet-sdk-5.0-source-built-artifactsAlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.214-1.el8_6 | 5.0.214-1.el8_6 |
dotnet-targeting-pack-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.17-1.el8_6 | 5.0.17-1.el8_6 |
dotnet-templates-5.0AlmaLinux:8 From an advisory covering 3 CVEs |
before 5.0.214-1.el8_6 | 5.0.214-1.el8_6 |
aspnetcore-runtime-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.25-1.el8_6 | 3.1.25-1.el8_6 |
aspnetcore-targeting-pack-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.25-1.el8_6 | 3.1.25-1.el8_6 |
dotnet-apphost-pack-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.25-1.el8_6 | 3.1.25-1.el8_6 |
dotnet-hostfxr-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.25-1.el8_6 | 3.1.25-1.el8_6 |
dotnet-runtime-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.25-1.el8_6 | 3.1.25-1.el8_6 |
dotnet-sdk-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.419-1.el8_6 | 3.1.419-1.el8_6 |
dotnet-sdk-3.1-source-built-artifactsAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.419-1.el8_6 | 3.1.419-1.el8_6 |
dotnet-targeting-pack-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.25-1.el8_6 | 3.1.25-1.el8_6 |
dotnet-templates-3.1AlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.419-1.el8_6 | 3.1.419-1.el8_6 |
dotnetBitnami |
5.0.0 up to 5.0.1, 6.0.0 up to 6.0.1 | 5.0.16.0.1 |
dotnet-sdkBitnami |
5.0.0 up to 5.0.1, 6.0.0 up to 6.0.1 | 5.0.16.0.1 |
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.25 |
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.17 |
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4 |
6.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.25 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.17 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4 |
6.0.5 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.25 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.17 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4 |
6.0.5 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.25 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.17 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4 |
6.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.25 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.17 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4 |
6.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.25 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.17 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4 |
6.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.25 |
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.17 |
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4 |
6.0.5 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
3.0.0 up to 3.1.25, plus listed versions 3.1.103.1.113.1.123.1.133.1.14 Show 15 moreShow less3.1.153.1.163.1.173.1.183.1.193.1.203.1.213.1.223.1.233.1.243.1.53.1.63.1.73.1.83.1.9 |
3.1.25 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.17 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4 |
6.0.5 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.25 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.17 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4 |
6.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
3.0.0 up to 3.1.25, plus listed versions 3.0.13.0.23.0.33.1.03.1.1 Show 23 moreShow less3.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.203.1.213.1.223.1.233.1.243.1.33.1.43.1.53.1.63.1.73.1.83.1.9 |
3.1.25 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.17 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4 |
6.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet |
5.0.0 up to 5.0.17, plus listed versions 5.0.15.0.105.0.115.0.125.0.13 Show 11 moreShow less5.0.145.0.155.0.165.0.25.0.35.0.45.0.55.0.65.0.75.0.85.0.9 |
5.0.17 |
Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet |
6.0.0 up to 6.0.5, plus listed versions 6.0.16.0.26.0.36.0.4 |
6.0.5 |
rh-dotnet31-aspnetcore-runtime-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.25-1.el7_9 | 0:3.1.25-1.el7_9 |
rh-dotnet31-aspnetcore-targeting-pack-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.25-1.el7_9 | 0:3.1.25-1.el7_9 |
rh-dotnet31-dotnetRed Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.419-1.el7_9 | 0:3.1.419-1.el7_9 |
rh-dotnet31-dotnet-apphost-pack-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.25-1.el7_9 | 0:3.1.25-1.el7_9 |
rh-dotnet31-dotnet-debuginfoRed Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.419-1.el7_9 | 0:3.1.419-1.el7_9 |
rh-dotnet31-dotnet-hostRed Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.25-1.el7_9 | 0:3.1.25-1.el7_9 |
rh-dotnet31-dotnet-hostfxr-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.25-1.el7_9 | 0:3.1.25-1.el7_9 |
rh-dotnet31-dotnet-runtime-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.25-1.el7_9 | 0:3.1.25-1.el7_9 |
rh-dotnet31-dotnet-sdk-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.419-1.el7_9 | 0:3.1.419-1.el7_9 |
rh-dotnet31-dotnet-sdk-3.1-source-built-artifactsRed Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.419-1.el7_9 | 0:3.1.419-1.el7_9 |
rh-dotnet31-dotnet-targeting-pack-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.25-1.el7_9 | 0:3.1.25-1.el7_9 |
rh-dotnet31-dotnet-templates-3.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.419-1.el7_9 | 0:3.1.419-1.el7_9 |
rh-dotnet31-netstandard-targeting-pack-2.1Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs |
before 0:3.1.419-1.el7_9 | 0:3.1.419-1.el7_9 |
rh-dotnet60-aspnetcore-runtime-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs |
before 0:6.0.5-1.el7_9 | 0:6.0.5-1.el7_9 |
rh-dotnet60-aspnetcore-targeting-pack-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs |
before 0:6.0.5-1.el7_9 | 0:6.0.5-1.el7_9 |
rh-dotnet60-dotnetRed Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs |
before 0:6.0.105-1.el7_9 | 0:6.0.105-1.el7_9 |
rh-dotnet60-dotnet-apphost-pack-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs |
before 0:6.0.5-1.el7_9 | 0:6.0.5-1.el7_9 |
rh-dotnet60-dotnet-debuginfoRed Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs |
before 0:6.0.105-1.el7_9 | 0:6.0.105-1.el7_9 |
rh-dotnet60-dotnet-hostRed Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs |
before 0:6.0.5-1.el7_9 | 0:6.0.5-1.el7_9 |
rh-dotnet60-dotnet-hostfxr-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs |
before 0:6.0.5-1.el7_9 | 0:6.0.5-1.el7_9 |
rh-dotnet60-dotnet-runtime-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs |
before 0:6.0.5-1.el7_9 | 0:6.0.5-1.el7_9 |
rh-dotnet60-dotnet-sdk-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs |
before 0:6.0.105-1.el7_9 | 0:6.0.105-1.el7_9 |
rh-dotnet60-dotnet-sdk-6.0-source-built-artifactsRed Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs |
before 0:6.0.105-1.el7_9 | 0:6.0.105-1.el7_9 |
rh-dotnet60-dotnet-targeting-pack-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs |
before 0:6.0.5-1.el7_9 | 0:6.0.5-1.el7_9 |
rh-dotnet60-dotnet-templates-6.0Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs |
before 0:6.0.105-1.el7_9 | 0:6.0.105-1.el7_9 |
rh-dotnet60-netstandard-targeting-pack-2.1Red Hat:rhel_dotnet:6.0::el7 From an advisory covering 3 CVEs |
before 0:6.0.105-1.el7_9 | 0:6.0.105-1.el7_9 |
rh-dotnet50-aspnetcore-runtime-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.17-1.el7_9 | 0:5.0.17-1.el7_9 |
rh-dotnet50-aspnetcore-targeting-pack-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.17-1.el7_9 | 0:5.0.17-1.el7_9 |
rh-dotnet50-dotnetRed Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.214-1.el7_9 | 0:5.0.214-1.el7_9 |
rh-dotnet50-dotnet-apphost-pack-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.17-1.el7_9 | 0:5.0.17-1.el7_9 |
rh-dotnet50-dotnet-debuginfoRed Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.214-1.el7_9 | 0:5.0.214-1.el7_9 |
rh-dotnet50-dotnet-hostRed Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.17-1.el7_9 | 0:5.0.17-1.el7_9 |
rh-dotnet50-dotnet-hostfxr-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.17-1.el7_9 | 0:5.0.17-1.el7_9 |
rh-dotnet50-dotnet-runtime-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.17-1.el7_9 | 0:5.0.17-1.el7_9 |
rh-dotnet50-dotnet-sdk-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.214-1.el7_9 | 0:5.0.214-1.el7_9 |
rh-dotnet50-dotnet-sdk-5.0-source-built-artifactsRed Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.214-1.el7_9 | 0:5.0.214-1.el7_9 |
rh-dotnet50-dotnet-targeting-pack-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.17-1.el7_9 | 0:5.0.17-1.el7_9 |
rh-dotnet50-dotnet-templates-5.0Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.214-1.el7_9 | 0:5.0.214-1.el7_9 |
rh-dotnet50-netstandard-targeting-pack-2.1Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs |
before 0:5.0.214-1.el7_9 | 0:5.0.214-1.el7_9 |
aspnetcore-runtime-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
aspnetcore-targeting-pack-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
dotnetRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el8_6 | 0:6.0.105-1.el8_6 |
dotnet-apphost-pack-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
dotnet-apphost-pack-6.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
dotnet-hostRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
dotnet-host-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
dotnet-hostfxr-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
dotnet-hostfxr-6.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
dotnet-runtime-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
dotnet-runtime-6.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
dotnet-sdk-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el8_6 | 0:6.0.105-1.el8_6 |
dotnet-sdk-6.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el8_6 | 0:6.0.105-1.el8_6 |
dotnet-targeting-pack-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
dotnet-templates-6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el8_6 | 0:6.0.105-1.el8_6 |
dotnet6.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el8_6 | 0:6.0.105-1.el8_6 |
dotnet6.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el8_6 | 0:6.0.105-1.el8_6 |
dotnet6.0-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el8_6 | 0:6.0.105-1.el8_6 |
netstandard-targeting-pack-2.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el8_6 | 0:6.0.105-1.el8_6 |
dotnet-apphost-pack-6.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
dotnet-host-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
dotnet-hostfxr-6.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
dotnet-runtime-6.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:6.0.5-1.el8_6 | 0:6.0.5-1.el8_6 |
dotnet-sdk-6.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:6.0.105-1.el8_6 | 0:6.0.105-1.el8_6 |
dotnet-sdk-6.0-source-built-artifactsRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:6.0.105-1.el8_6 | 0:6.0.105-1.el8_6 |
dotnet6.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:6.0.105-1.el8_6 | 0:6.0.105-1.el8_6 |
dotnet6.0-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:6.0.105-1.el8_6 | 0:6.0.105-1.el8_6 |
aspnetcore-runtime-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.17-1.el8_6 | 0:5.0.17-1.el8_6 |
aspnetcore-targeting-pack-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.17-1.el8_6 | 0:5.0.17-1.el8_6 |
dotnet-apphost-pack-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.17-1.el8_6 | 0:5.0.17-1.el8_6 |
dotnet-apphost-pack-5.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.17-1.el8_6 | 0:5.0.17-1.el8_6 |
dotnet-hostfxr-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.17-1.el8_6 | 0:5.0.17-1.el8_6 |
dotnet-hostfxr-5.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.17-1.el8_6 | 0:5.0.17-1.el8_6 |
dotnet-runtime-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.17-1.el8_6 | 0:5.0.17-1.el8_6 |
dotnet-runtime-5.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.17-1.el8_6 | 0:5.0.17-1.el8_6 |
dotnet-sdk-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.214-1.el8_6 | 0:5.0.214-1.el8_6 |
dotnet-sdk-5.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.214-1.el8_6 | 0:5.0.214-1.el8_6 |
dotnet-targeting-pack-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.17-1.el8_6 | 0:5.0.17-1.el8_6 |
dotnet-templates-5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.214-1.el8_6 | 0:5.0.214-1.el8_6 |
dotnet5.0Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.214-1.el8_6 | 0:5.0.214-1.el8_6 |
dotnet5.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.214-1.el8_6 | 0:5.0.214-1.el8_6 |
dotnet5.0-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.0.214-1.el8_6 | 0:5.0.214-1.el8_6 |
dotnet-apphost-pack-5.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:5.0.17-1.el8_6 | 0:5.0.17-1.el8_6 |
dotnet-hostfxr-5.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:5.0.17-1.el8_6 | 0:5.0.17-1.el8_6 |
dotnet-runtime-5.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:5.0.17-1.el8_6 | 0:5.0.17-1.el8_6 |
dotnet-sdk-5.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:5.0.214-1.el8_6 | 0:5.0.214-1.el8_6 |
dotnet-sdk-5.0-source-built-artifactsRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:5.0.214-1.el8_6 | 0:5.0.214-1.el8_6 |
dotnet5.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:5.0.214-1.el8_6 | 0:5.0.214-1.el8_6 |
dotnet5.0-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:5.0.214-1.el8_6 | 0:5.0.214-1.el8_6 |
aspnetcore-runtime-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.25-1.el8_6 | 0:3.1.25-1.el8_6 |
aspnetcore-targeting-pack-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.25-1.el8_6 | 0:3.1.25-1.el8_6 |
dotnet-apphost-pack-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.25-1.el8_6 | 0:3.1.25-1.el8_6 |
dotnet-apphost-pack-3.1-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.25-1.el8_6 | 0:3.1.25-1.el8_6 |
dotnet-hostfxr-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.25-1.el8_6 | 0:3.1.25-1.el8_6 |
dotnet-hostfxr-3.1-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.25-1.el8_6 | 0:3.1.25-1.el8_6 |
dotnet-runtime-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.25-1.el8_6 | 0:3.1.25-1.el8_6 |
dotnet-runtime-3.1-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.25-1.el8_6 | 0:3.1.25-1.el8_6 |
dotnet-sdk-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.419-1.el8_6 | 0:3.1.419-1.el8_6 |
dotnet-sdk-3.1-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.419-1.el8_6 | 0:3.1.419-1.el8_6 |
dotnet-targeting-pack-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.25-1.el8_6 | 0:3.1.25-1.el8_6 |
dotnet-templates-3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.419-1.el8_6 | 0:3.1.419-1.el8_6 |
dotnet3.1Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.419-1.el8_6 | 0:3.1.419-1.el8_6 |
dotnet3.1-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.419-1.el8_6 | 0:3.1.419-1.el8_6 |
dotnet3.1-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.419-1.el8_6 | 0:3.1.419-1.el8_6 |
dotnet-apphost-pack-3.1-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:3.1.25-1.el8_6 | 0:3.1.25-1.el8_6 |
dotnet-hostfxr-3.1-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:3.1.25-1.el8_6 | 0:3.1.25-1.el8_6 |
dotnet-runtime-3.1-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:3.1.25-1.el8_6 | 0:3.1.25-1.el8_6 |
dotnet-sdk-3.1-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:3.1.419-1.el8_6 | 0:3.1.419-1.el8_6 |
dotnet-sdk-3.1-source-built-artifactsRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:3.1.419-1.el8_6 | 0:3.1.419-1.el8_6 |
dotnet3.1-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:3.1.419-1.el8_6 | 0:3.1.419-1.el8_6 |
dotnet3.1-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:3.1.419-1.el8_6 | 0:3.1.419-1.el8_6 |
aspnetcore-runtime-6.0Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
aspnetcore-targeting-pack-6.0Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
dotnet-apphost-pack-6.0Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
dotnet-apphost-pack-6.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
dotnet-hostRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
dotnet-host-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
dotnet-hostfxr-6.0Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
dotnet-hostfxr-6.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
dotnet-runtime-6.0Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
dotnet-runtime-6.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
dotnet-sdk-6.0Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el9_0 | 0:6.0.105-1.el9_0 |
dotnet-sdk-6.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el9_0 | 0:6.0.105-1.el9_0 |
dotnet-targeting-pack-6.0Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
dotnet-templates-6.0Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el9_0 | 0:6.0.105-1.el9_0 |
dotnet6.0Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el9_0 | 0:6.0.105-1.el9_0 |
dotnet6.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el9_0 | 0:6.0.105-1.el9_0 |
dotnet6.0-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el9_0 | 0:6.0.105-1.el9_0 |
netstandard-targeting-pack-2.1Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.0.105-1.el9_0 | 0:6.0.105-1.el9_0 |
dotnet-apphost-pack-6.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
dotnet-host-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
dotnet-hostfxr-6.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
dotnet-runtime-6.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs |
before 0:6.0.5-1.el9_0 | 0:6.0.5-1.el9_0 |
dotnet-sdk-6.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs |
before 0:6.0.105-1.el9_0 | 0:6.0.105-1.el9_0 |
dotnet-sdk-6.0-source-built-artifactsRed Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs |
before 0:6.0.105-1.el9_0 | 0:6.0.105-1.el9_0 |
dotnet6.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs |
before 0:6.0.105-1.el9_0 | 0:6.0.105-1.el9_0 |
dotnet6.0-debugsourceRed Hat:enterprise_linux:9::crb From an advisory covering 3 CVEs |
before 0:6.0.105-1.el9_0 | 0:6.0.105-1.el9_0 |
dotnet6.0Rocky Linux:8 From an advisory covering 3 CVEs |
before 0:6.0.105-1.el8_6 | 0:6.0.105-1.el8_6 |
dotnet5.0Rocky Linux:8 From an advisory covering 3 CVEs |
before 0:5.0.214-1.el8_6 | 0:5.0.214-1.el8_6 |
dotnet3.1Rocky Linux:8 From an advisory covering 3 CVEs |
before 0:3.1.419-1.el8_6 | 0:3.1.419-1.el8_6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-29145 is a high vulnerability (CVSS 7.5) in Microsoft .net, published May 10, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.54%, the 92nd percentile. Fixed in Microsoft.AspNetCore.App.Runtime.win-x64 3.1.25.
References
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29145
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29145
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB
github.com/dotnet/aspnetcore/security/advisories/GHSA-fcg8-mg9g-6hc4
Show 43 moreShow less
nvd.nist.gov/vuln/detail/CVE-2022-29145
errata.almalinux.org/8/ALSA-2022-2199.html
vulners.com/cve/CVE-2022-23267
access.redhat.com/errata/RHSA-2022:2194
bugzilla.redhat.com/show_bug.cgi?id=2083647
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2194.json
cve.org/CVERecord?id=CVE-2022-23267
errata.rockylinux.org/RLSA-2022:2199
Left out here: the rest of 2 source descriptions. The JSON record has them.