Skip to main content
← All vulnerabilities
CVE-2022-21986GHSA-X459-P2RX-F8FFBIT-DOTNET-2022-21986BIT-DOTNET-SDK-2022-21986

.NET Denial of Service Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 16.9.17, 16.11.10, 17.0.6, 8.10.18, 5.0.14, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

.NET Denial of Service Vulnerability

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)

    From 15.0.0 · fixed in 16.9.17

  • Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)

    From 16.11.0 · fixed in 16.11.10

  • Microsoft Microsoft Visual Studio 2022 version 17.0

    From 17.0.0 · fixed in 17.0.6

  • Microsoft Visual Studio 2019 for Mac version 8.10

    From 8.1.0 · fixed in 8.10.18

  • Microsoft .NET 5.0

    From 5.0.0 · fixed in 5.0.14

  • Microsoft .NET 6.0

    From 6.0.0 · fixed in 6.0.2

  • dotnetBitnami

    From 5.0.0 · fixed in 5.0.14; From 6.0.0 · fixed in 6.0.2

  • dotnet-sdkBitnami

    From 5.0.0 · fixed in 5.0.14; From 6.0.0 · fixed in 6.0.2

  • Microsoft.AspNetCore.App.Runtime.win-x64NuGet

    From 5.0.0 · fixed in 5.0.14

  • Microsoft.AspNetCore.App.Runtime.linux-x64NuGet

    From 5.0.0 · fixed in 5.0.14

  • Microsoft.AspNetCore.App.Runtime.win-x86NuGet

    From 5.0.0 · fixed in 5.0.14

  • Microsoft.AspNetCore.App.Runtime.osx-x64NuGet

    From 5.0.0 · fixed in 5.0.14

  • Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet

    From 5.0.0 · fixed in 5.0.14

  • Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet

    From 5.0.0 · fixed in 5.0.14

  • Microsoft.AspNetCore.App.Runtime.linux-armNuGet

    From 5.0.0 · fixed in 5.0.14

  • Microsoft.AspNetCore.App.Runtime.win-arm64NuGet

    From 5.0.0 · fixed in 5.0.14

  • Microsoft.AspNetCore.App.Runtime.win-armNuGet

    From 5.0.0 · fixed in 5.0.14

  • Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet

    From 5.0.0 · fixed in 5.0.14

  • Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet

    From 5.0.0 · fixed in 5.0.14

  • Microsoft.AspNetCore.App.Runtime.linux-armNuGet

    From 6.0.0 · fixed in 6.0.2

  • Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet

    From 6.0.0 · fixed in 6.0.2

  • Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet

    From 6.0.0 · fixed in 6.0.2

  • Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet

    From 6.0.0 · fixed in 6.0.2

  • Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet

    From 6.0.0 · fixed in 6.0.2

  • Microsoft.AspNetCore.App.Runtime.linux-x64NuGet

    From 6.0.0 · fixed in 6.0.2

  • Microsoft.AspNetCore.App.Runtime.osx-arm64NuGet

    From 6.0.0 · fixed in 6.0.2

  • Microsoft.AspNetCore.App.Runtime.osx-x64NuGet

    From 6.0.0 · fixed in 6.0.2

  • Microsoft.AspNetCore.App.Runtime.win-armNuGet

    From 6.0.0 · fixed in 6.0.2

  • Microsoft.AspNetCore.App.Runtime.win-arm64NuGet

    From 6.0.0 · fixed in 6.0.2

  • Microsoft.AspNetCore.App.Runtime.win-x64NuGet

    From 6.0.0 · fixed in 6.0.2

  • Microsoft.AspNetCore.App.Runtime.win-x86NuGet

    From 6.0.0 · fixed in 6.0.2

References 1

msrc.microsoft.com