Skip to main content
← All vulnerabilities
CVE-2022-38013GHSA-R8M2-4X37-6592BIT-DOTNET-2022-38013BIT-DOTNET-SDK-2022-38013

.NET Core and Visual Studio Denial of Service Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 17.3.5, 17.3.4, 3.1.29, 6.0.9, 16.11.19, and 3 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

.NET Core and Visual Studio Denial of Service Vulnerability

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Microsoft Visual Studio 2022 for Mac version 17.3

    From 17.3 · fixed in 17.3.5

  • Microsoft Microsoft Visual Studio 2022 version 17.3

    From 17.0.0 · fixed in 17.3.4

  • Microsoft .NET Core 3.1

    From 3.1 · fixed in 3.1.29

  • Microsoft .NET 6.0

    From 6.0.0 · fixed in 6.0.9

  • Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)

    From 16.11.0 · fixed in 16.11.19

  • Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)

    From 15.0.0 · fixed in 16.9.25

  • Microsoft Microsoft Visual Studio 2022 version 17.0

    From 17.0.0 · fixed in 17.0.14

  • Microsoft Microsoft Visual Studio 2022 version 17.2

    From 17.2.0 · fixed in 17.2.8

  • Microsoft.AspNetCore.App.Runtime.linux-armNuGet

    From 3.1.0 · fixed in 3.1.29

  • Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet

    From 3.1.0 · fixed in 3.1.29

  • Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet

    From 3.1.0 · fixed in 3.1.29

  • Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet

    From 3.1.0 · fixed in 3.1.29

  • Microsoft.AspNetCore.App.Runtime.linux-x64NuGet

    From 3.1.0 · fixed in 3.1.29

  • Microsoft.AspNetCore.App.Runtime.osx-x64NuGet

    From 3.1.0 · fixed in 3.1.29

  • Microsoft.AspNetCore.App.Runtime.win-armNuGet

    From 3.1.0 · fixed in 3.1.29

  • Microsoft.AspNetCore.App.Runtime.win-arm64NuGet

    From 3.1.0 · fixed in 3.1.29

  • Microsoft.AspNetCore.App.Runtime.win-x64NuGet

    From 3.1.0 · fixed in 3.1.29

  • Microsoft.AspNetCore.App.Runtime.win-x86NuGet

    From 3.1.0 · fixed in 3.1.29

  • Microsoft.AspNetCore.App.Runtime.linux-armNuGet

    From 5.0.0 · fixed in 6.0.9

  • Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet

    From 5.0.0 · fixed in 6.0.9

  • Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet

    From 5.0.0 · fixed in 6.0.9

  • Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet

    From 5.0.0 · fixed in 6.0.9

  • Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet

    From 5.0.0 · fixed in 6.0.9

  • Microsoft.AspNetCore.App.Runtime.linux-x64NuGet

    From 5.0.0 · fixed in 6.0.9

  • Microsoft.AspNetCore.App.Runtime.osx-arm64NuGet

    From 5.0.0 · fixed in 6.0.9

  • Microsoft.AspNetCore.App.Runtime.osx-x64NuGet

    From 5.0.0 · fixed in 6.0.9

  • Microsoft.AspNetCore.App.Runtime.win-armNuGet

    From 5.0.0 · fixed in 6.0.9

  • Microsoft.AspNetCore.App.Runtime.win-arm64NuGet

    From 5.0.0 · fixed in 6.0.9

  • Microsoft.AspNetCore.App.Runtime.win-x64NuGet

    From 5.0.0 · fixed in 6.0.9

  • Microsoft.AspNetCore.App.Runtime.win-x86NuGet

    From 5.0.0 · fixed in 6.0.9

References 1

msrc.microsoft.com