NuGet/Microsoft.AspNetCore.App.Runtime.linux-arm CVE-2022-24464: high 7.5, EPSS 3.55%
.NET Denial of Service Vulnerability
Action: Upgrade Microsoft.AspNetCore.App.Runtime.linux-arm to 3.1.23 (3.x), 5.0.15 (5.x) or 6.0.3 (6.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.1.23 | - |
| 5.0.0 | 5.0.15 | - |
| 6.0.0 | 6.0.3 | - |
Fixed versions
| 3.1.23 | 5.0.15 | 6.0.3 |
Sources
- osv: GHSA-cw98-9j8w-wxv9
- https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9
- https://nvd.nist.gov/vuln/detail/CVE-2022-24464
- https://github.com/dotnet/announcements/issues/212
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24464
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464
CVE-2022-24464 · published · modified · JSON