NuGet/Microsoft.AspNetCore.App.Runtime.win-x86 CVE-2022-29145: high 7.5, EPSS 5.54%
.NET Denial of Service Vulnerability
Action: Upgrade Microsoft.AspNetCore.App.Runtime.win-x86 to 3.1.25 (3.x), 5.0.17 (5.x) or 6.0.5 (6.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.1.25 | - |
| 5.0.0 | 5.0.17 | - |
| 6.0.0 | 6.0.5 | - |
Fixed versions
| 3.1.25 | 5.0.17 | 6.0.5 |
Sources
- osv: GHSA-fcg8-mg9g-6hc4#NuGet/Microsoft.AspNetCore.App.Runtime.win-x86
- https://github.com/dotnet/aspnetcore/security/advisories/GHSA-fcg8-mg9g-6hc4
- https://nvd.nist.gov/vuln/detail/CVE-2022-29145
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5FPEQ6BTYRGTS6IYCDTZW6YF5HLQ3BY
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W5FPEQ6BTYRGTS6IYCDTZW6YF5HLQ3BY
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29145
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29145
CVE-2022-29145 · published · modified · JSON