NuGet/Microsoft.AspNetCore.App.Runtime.linux-arm64 CVE-2022-38013: high 7.5, EPSS 4.04%
.NET Denial of Service Vulnerability
Action: Upgrade Microsoft.AspNetCore.App.Runtime.linux-arm64 to 3.1.29 (3.x) or 6.0.9 (6.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.1.0 | 3.1.29 | - |
| 5.0.0 | 6.0.9 | - |
Fixed versions
| 3.1.29 | 6.0.9 |
Sources
- osv: GHSA-r8m2-4x37-6592#NuGet/Microsoft.AspNetCore.App.Runtime.linux-arm64
- https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592
- https://nvd.nist.gov/vuln/detail/CVE-2022-38013
- https://github.com/dotnet/aspnetcore
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38013
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013
CVE-2022-38013 · published · modified · JSON