CVE-2022-21986
Fixed in a distro release EPSS 4%CVSS 7.5
.NET Denial of Service Vulnerability
Products: Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8), Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10), Microsoft Visual Studio 2022 version 17.0, Microsoft Visual Studio 2019 for Mac version 8.10, Microsoft .NET 5.0, Microsoft .NET 6.0
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-arm | 6.0.2 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-arm | 5.0.14 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-arm64 | 5.0.14 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-arm64 | 6.0.2 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-musl-arm | 5.0.14 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-musl-arm | 6.0.2 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | 5.0.14 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | 6.0.2 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | 6.0.2 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | 5.0.14 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-x64 | 6.0.2 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.14 |
| NuGet | Microsoft.AspNetCore.App.Runtime.osx-arm64 | 6.0.2 |
| NuGet | Microsoft.AspNetCore.App.Runtime.osx-x64 | 6.0.2 |
| NuGet | Microsoft.AspNetCore.App.Runtime.osx-x64 | 5.0.14 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-arm | 6.0.2 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-arm | 5.0.14 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-arm64 | 5.0.14 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-arm64 | 6.0.2 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-x64 | 5.0.14 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-x64 | 6.0.2 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-x86 | 5.0.14 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-x86 | 6.0.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 8 | aspnetcore-runtime-5.0 | 0:5.0.14-1.el8_5 |
| Red Hat Enterprise Linux 8 | aspnetcore-runtime-6.0 | 0:6.0.2-1.el8_5 |
| Red Hat Enterprise Linux 8 | aspnetcore-targeting-pack-5.0 | 0:5.0.14-1.el8_5 |
| Red Hat Enterprise Linux 8 | aspnetcore-targeting-pack-6.0 | 0:6.0.2-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet | 0:6.0.102-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-5.0 | 0:5.0.14-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-5.0-debuginfo | 0:5.0.14-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-6.0 | 0:6.0.2-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-6.0-debuginfo | 0:6.0.2-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-host | 0:6.0.2-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-host-debuginfo | 0:6.0.2-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-5.0 | 0:5.0.14-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-5.0-debuginfo | 0:5.0.14-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-6.0 | 0:6.0.2-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-6.0-debuginfo | 0:6.0.2-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-5.0 | 0:5.0.14-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-5.0-debuginfo | 0:5.0.14-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-6.0 | 0:6.0.2-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-6.0-debuginfo | 0:6.0.2-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-5.0 | 0:5.0.211-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-5.0-debuginfo | 0:5.0.211-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-5.0-source-built-artifacts | 0:5.0.211-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-6.0 | 0:6.0.102-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-6.0-debuginfo | 0:6.0.102-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-targeting-pack-5.0 | 0:5.0.14-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-targeting-pack-6.0 | 0:6.0.2-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-templates-5.0 | 0:5.0.211-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet-templates-6.0 | 0:6.0.102-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet5.0 | 0:5.0.211-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet5.0-debuginfo | 0:5.0.211-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet5.0-debugsource | 0:5.0.211-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet6.0 | 0:6.0.102-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet6.0-debuginfo | 0:6.0.102-1.el8_5 |
| Red Hat Enterprise Linux 8 | dotnet6.0-debugsource | 0:6.0.102-1.el8_5 |
| Red Hat Enterprise Linux 8 | netstandard-targeting-pack-2.1 | 0:6.0.102-1.el8_5 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-aspnetcore-runtime-5.0 | 0:5.0.14-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-aspnetcore-targeting-pack-5.0 | 0:5.0.14-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet | 0:5.0.211-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-apphost-pack-5.0 | 0:5.0.14-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-debuginfo | 0:5.0.211-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-host | 0:5.0.14-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-hostfxr-5.0 | 0:5.0.14-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-runtime-5.0 | 0:5.0.14-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-sdk-5.0 | 0:5.0.211-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts | 0:5.0.211-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-targeting-pack-5.0 | 0:5.0.14-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-templates-5.0 | 0:5.0.211-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-netstandard-targeting-pack-2.1 | 0:5.0.211-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-aspnetcore-runtime-6.0 | 0:6.0.2-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-aspnetcore-targeting-pack-6.0 | 0:6.0.2-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet | 0:6.0.102-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-apphost-pack-6.0 | 0:6.0.2-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-debuginfo | 0:6.0.102-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-host | 0:6.0.2-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-hostfxr-6.0 | 0:6.0.2-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-runtime-6.0 | 0:6.0.2-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-sdk-6.0 | 0:6.0.102-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts | 0:6.0.102-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-targeting-pack-6.0 | 0:6.0.2-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-templates-6.0 | 0:6.0.102-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-netstandard-targeting-pack-2.1 | 0:6.0.102-1.el7_9 |
| Rocky Linux 8 | dotnet5.0 | 0:5.0.211-1.el8_5 |
| Rocky Linux 8 | dotnet6.0 | 0:6.0.102-1.el8_5 |