{"action":"Upgrade Microsoft.AspNetCore.App.Runtime.linux-arm to 3.1.23 (3.x), 5.0.15 (5.x) or 6.0.3 (6.x) or later.","affected":[{"fixed":"3.1.23","introduced":"3.0.0"},{"fixed":"5.0.15","introduced":"5.0.0"},{"fixed":"6.0.3","introduced":"6.0.0"}],"component":"Microsoft.AspNetCore.App.Runtime.linux-arm","cve_ids":["CVE-2022-24464"],"ecosystem":"NuGet","epss":0.03551,"exploited":false,"fixed_versions":["3.1.23","5.0.15","6.0.3"],"ghsa_id":"GHSA-cw98-9j8w-wxv9","id":"tcs_01M5N8KH26S94GRF7XJBXCF2EX","modified_at":"2026-06-08T23:45:22.745767562Z","published_at":"2022-10-21T20:32:34Z","references":["https://osv.dev/vulnerability/GHSA-cw98-9j8w-wxv9","https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9","https://nvd.nist.gov/vuln/detail/CVE-2022-24464","https://github.com/dotnet/announcements/issues/212","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24464","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cw98-9j8w-wxv9","url":"https://osv.dev/vulnerability/GHSA-cw98-9j8w-wxv9"}],"summary":".NET Denial of Service Vulnerability"}