NuGet/Microsoft.AspNetCore.App.Runtime.linux-x64 CVE-2022-21986: high 7.5, EPSS 3.74%
.NET Denial of Service Vulnerability
Action: Upgrade Microsoft.AspNetCore.App.Runtime.linux-x64 to 5.0.14 (5.x) or 6.0.2 (6.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.14 | - |
| 6.0.0 | 6.0.2 | - |
Fixed versions
| 5.0.14 | 6.0.2 |
Sources
- osv: GHSA-x459-p2rx-f8ff#NuGet/Microsoft.AspNetCore.App.Runtime.linux-x64
- https://github.com/dotnet/aspnetcore/security/advisories/GHSA-x459-p2rx-f8ff
- https://nvd.nist.gov/vuln/detail/CVE-2022-21986
- https://github.com/dotnet/announcements/issues/207
- https://github.com/dotnet/aspnetcore
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21986
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986
CVE-2022-21986 · published · modified · JSON