CVE-2022-30184
Fixed in a distro release EPSS 6%CVSS 5.5
.NET and Visual Studio Information Disclosure Vulnerability
Products: Microsoft .NET 6.0, Microsoft .NET Core 3.1, Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8), Microsoft Visual Studio 2019 for Mac version 8.10, Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10), Microsoft Visual Studio 2022 version 17.0, Microsoft Visual Studio 2022 version 17.2, Microsoft NuGet.exe, Microsoft Visual Studio 2022 for Mac version 17.0
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| NuGet | NuGet.CommandLine | 5.2.1 |
| NuGet | NuGet.CommandLine | 4.9.5 |
| NuGet | NuGet.CommandLine | 6.2.1 |
| NuGet | NuGet.CommandLine | 6.0.2 |
| NuGet | NuGet.CommandLine | 5.11.2 |
| NuGet | NuGet.CommandLine | 5.9.2 |
| NuGet | NuGet.CommandLine | 5.7.2 |
| NuGet | NuGet.CommandLine.XPlat | 5.2.1 |
| NuGet | NuGet.CommandLine.XPlat | 5.9.2 |
| NuGet | NuGet.CommandLine.XPlat | 6.2.1 |
| NuGet | NuGet.CommandLine.XPlat | 6.0.2 |
| NuGet | NuGet.CommandLine.XPlat | 5.11.2 |
| NuGet | NuGet.CommandLine.XPlat | 5.7.2 |
| NuGet | NuGet.CommandLine.XPlat | 4.9.5 |
| NuGet | NuGet.Commands | 5.2.1 |
| NuGet | NuGet.Commands | 4.9.5 |
| NuGet | NuGet.Commands | 5.7.2 |
| NuGet | NuGet.Commands | 6.2.1 |
| NuGet | NuGet.Commands | 5.9.2 |
| NuGet | NuGet.Commands | 5.11.2 |
| NuGet | NuGet.Commands | 6.0.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 8 | aspnetcore-runtime-3.1 | 0:3.1.26-1.el8_6 |
| Red Hat Enterprise Linux 8 | aspnetcore-runtime-6.0 | 0:6.0.6-1.el8_6 |
| Red Hat Enterprise Linux 8 | aspnetcore-targeting-pack-3.1 | 0:3.1.26-1.el8_6 |
| Red Hat Enterprise Linux 8 | aspnetcore-targeting-pack-6.0 | 0:6.0.6-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet | 0:6.0.106-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-3.1 | 0:3.1.26-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-3.1-debuginfo | 0:3.1.26-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-6.0 | 0:6.0.6-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-6.0-debuginfo | 0:6.0.6-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-host | 0:6.0.6-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-host-debuginfo | 0:6.0.6-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-3.1 | 0:3.1.26-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-3.1-debuginfo | 0:3.1.26-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-6.0 | 0:6.0.6-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-6.0-debuginfo | 0:6.0.6-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-3.1 | 0:3.1.26-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-3.1-debuginfo | 0:3.1.26-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-6.0 | 0:6.0.6-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-6.0-debuginfo | 0:6.0.6-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-3.1 | 0:3.1.420-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-3.1-debuginfo | 0:3.1.420-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-3.1-source-built-artifacts | 0:3.1.420-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-6.0 | 0:6.0.106-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-6.0-debuginfo | 0:6.0.106-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-6.0-source-built-artifacts | 0:6.0.106-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-targeting-pack-3.1 | 0:3.1.26-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-targeting-pack-6.0 | 0:6.0.6-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-templates-3.1 | 0:3.1.420-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet-templates-6.0 | 0:6.0.106-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet3.1 | 0:3.1.420-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet3.1-debuginfo | 0:3.1.420-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet3.1-debugsource | 0:3.1.420-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet6.0 | 0:6.0.106-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet6.0-debuginfo | 0:6.0.106-1.el8_6 |
| Red Hat Enterprise Linux 8 | dotnet6.0-debugsource | 0:6.0.106-1.el8_6 |
| Red Hat Enterprise Linux 8 | netstandard-targeting-pack-2.1 | 0:6.0.106-1.el8_6 |
| Red Hat Enterprise Linux 9 | aspnetcore-runtime-6.0 | 0:6.0.6-1.el9_0 |
| Red Hat Enterprise Linux 9 | aspnetcore-targeting-pack-6.0 | 0:6.0.6-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet-apphost-pack-6.0 | 0:6.0.6-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet-apphost-pack-6.0-debuginfo | 0:6.0.6-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet-host | 0:6.0.6-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet-host-debuginfo | 0:6.0.6-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet-hostfxr-6.0 | 0:6.0.6-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet-hostfxr-6.0-debuginfo | 0:6.0.6-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet-runtime-6.0 | 0:6.0.6-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet-runtime-6.0-debuginfo | 0:6.0.6-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet-sdk-6.0 | 0:6.0.106-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet-sdk-6.0-debuginfo | 0:6.0.106-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet-sdk-6.0-source-built-artifacts | 0:6.0.106-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet-targeting-pack-6.0 | 0:6.0.6-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet-templates-6.0 | 0:6.0.106-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet6.0 | 0:6.0.106-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet6.0-debuginfo | 0:6.0.106-1.el9_0 |
| Red Hat Enterprise Linux 9 | dotnet6.0-debugsource | 0:6.0.106-1.el9_0 |
| Red Hat Enterprise Linux 9 | netstandard-targeting-pack-2.1 | 0:6.0.106-1.el9_0 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-aspnetcore-runtime-3.1 | 0:3.1.26-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-aspnetcore-targeting-pack-3.1 | 0:3.1.26-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet | 0:3.1.420-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-apphost-pack-3.1 | 0:3.1.26-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-debuginfo | 0:3.1.420-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-host | 0:3.1.26-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-hostfxr-3.1 | 0:3.1.26-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-runtime-3.1 | 0:3.1.26-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-sdk-3.1 | 0:3.1.420-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts | 0:3.1.420-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-targeting-pack-3.1 | 0:3.1.26-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-templates-3.1 | 0:3.1.420-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-netstandard-targeting-pack-2.1 | 0:3.1.420-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-aspnetcore-runtime-6.0 | 0:6.0.6-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-aspnetcore-targeting-pack-6.0 | 0:6.0.6-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet | 0:6.0.106-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-apphost-pack-6.0 | 0:6.0.6-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-debuginfo | 0:6.0.106-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-host | 0:6.0.6-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-hostfxr-6.0 | 0:6.0.6-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-runtime-6.0 | 0:6.0.6-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-sdk-6.0 | 0:6.0.106-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts | 0:6.0.106-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-targeting-pack-6.0 | 0:6.0.6-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-templates-6.0 | 0:6.0.106-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-netstandard-targeting-pack-2.1 | 0:6.0.106-1.el7_9 |
| Rocky Linux 8 | dotnet3.1 | 0:3.1.420-1.el8_6 |
| Rocky Linux 8 | dotnet6.0 | 0:6.0.106-1.el8_6 |