Skip to main content
← All vulnerabilities
CVE-2022-23267GHSA-485P-MRJ5-8W2VBIT-DOTNET-2022-23267BIT-DOTNET-SDK-2022-23267BIT-POWERSHELL-2022-23267

.NET and Visual Studio Denial of Service Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 3.1.25, 5.0.17, 16.9.21, 8.10.24, 16.11.14, and 6 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

.NET and Visual Studio Denial of Service Vulnerability

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Microsoft .NET Core 3.1

    From 3.1 · fixed in 3.1.25

  • Microsoft .NET 5.0

    From 5.0.0 · fixed in 5.0.17

  • Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)

    From 15.0.0 · fixed in 16.9.21

  • Microsoft Visual Studio 2019 for Mac version 8.10

    From 8.1.0 · fixed in 8.10.24

  • Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)

    From 16.11.0 · fixed in 16.11.14

  • Microsoft Microsoft Visual Studio 2022 version 17.0

    From 17.0.0 · fixed in 17.0.10

  • Microsoft .NET 6.0

    From 6.0.0 · fixed in 6.0.5

  • Microsoft Microsoft Visual Studio 2022 version 17.1

    From 17.0.0 · fixed in 17.1.7

  • Microsoft PowerShell 7.0

    From 7.0.0 · fixed in 7.0.11

  • Microsoft PowerShell 7.2

    From 7.2.0 · fixed in 7.2.4

  • Microsoft Visual Studio 2022 for Mac version 17.0

    From 17.0.0 · fixed in 17.0.3

  • Microsoft.AspNetCore.App.Runtime.linux-armNuGet

    From 3.0.0 · fixed in 3.1.25

  • Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet

    From 3.0.0 · fixed in 3.1.25

  • Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet

    From 3.0.0 · fixed in 3.1.25

  • Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet

    From 3.0.0 · fixed in 3.1.25

  • Microsoft.AspNetCore.App.Runtime.linux-x64NuGet

    From 3.0.0 · fixed in 3.1.25

  • Microsoft.AspNetCore.App.Runtime.osx-x64NuGet

    From 3.0.0 · fixed in 3.1.25

  • Microsoft.AspNetCore.App.Runtime.win-armNuGet

    From 3.0.0 · fixed in 3.1.25

  • Microsoft.AspNetCore.App.Runtime.win-arm64NuGet

    From 3.0.0 · fixed in 3.1.25

  • Microsoft.AspNetCore.App.Runtime.win-x64NuGet

    From 3.0.0 · fixed in 3.1.25

  • Microsoft.AspNetCore.App.Runtime.win-x86NuGet

    From 3.0.0 · fixed in 3.1.25

  • Microsoft.AspNetCore.App.Runtime.win-x64NuGet

    From 5.0.0 · fixed in 5.0.17

  • Microsoft.AspNetCore.App.Runtime.linux-x64NuGet

    From 5.0.0 · fixed in 5.0.17

  • Microsoft.AspNetCore.App.Runtime.win-x86NuGet

    From 5.0.0 · fixed in 5.0.17

  • Microsoft.AspNetCore.App.Runtime.osx-x64NuGet

    From 5.0.0 · fixed in 5.0.17

  • Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet

    From 5.0.0 · fixed in 5.0.17

  • Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet

    From 5.0.0 · fixed in 5.0.17

  • Microsoft.AspNetCore.App.Runtime.linux-armNuGet

    From 5.0.0 · fixed in 5.0.17

  • Microsoft.AspNetCore.App.Runtime.win-arm64NuGet

    From 5.0.0 · fixed in 5.0.17

  • Microsoft.AspNetCore.App.Runtime.win-armNuGet

    From 5.0.0 · fixed in 5.0.17

  • Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet

    From 5.0.0 · fixed in 5.0.17

  • Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet

    From 5.0.1 · fixed in 5.0.17

  • Microsoft.AspNetCore.App.Runtime.linux-armNuGet

    From 6.0.0 · fixed in 6.0.5

  • Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet

    From 6.0.0 · fixed in 6.0.5

  • Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet

    From 6.0.0 · fixed in 6.0.5

  • Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet

    From 6.0.0 · fixed in 6.0.5

  • Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet

    From 6.0.0 · fixed in 6.0.5

  • Microsoft.AspNetCore.App.Runtime.linux-x64NuGet

    From 6.0.0 · fixed in 6.0.5

  • Microsoft.AspNetCore.App.Runtime.osx-arm64NuGet

    From 6.0.0 · fixed in 6.0.5

  • Microsoft.AspNetCore.App.Runtime.osx-x64NuGet

    From 6.0.0 · fixed in 6.0.5

  • Microsoft.AspNetCore.App.Runtime.win-armNuGet

    From 6.0.0 · fixed in 6.0.5

  • Microsoft.AspNetCore.App.Runtime.win-arm64NuGet

    From 6.0.0 · fixed in 6.0.5

  • Microsoft.AspNetCore.App.Runtime.win-x64NuGet

    From 6.0.0 · fixed in 6.0.5

  • Microsoft.AspNetCore.App.Runtime.win-x86NuGet

    From 6.0.0 · fixed in 6.0.5

References 1

msrc.microsoft.com