CVE-2022-38013

.NET Core and Visual Studio Denial of Service Vulnerability
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
microsoftCNA
7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
VendorProductVersion
microsoft.net
6.0.0
microsoft.net_core
3.1
microsoftvisual_studio_2019
16.9
microsoftvisual_studio_2019
16.11
microsoftvisual_studio_2022
17.0
microsoftvisual_studio_2022
17.2
microsoftvisual_studio_2022
17.3
microsoftvisual_studio_2022
17.3
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
dotnet6
kinetic
Fixed 6.0.109-0ubuntu1
released
jammy
Fixed 6.0.109-0ubuntu1~22.04.1
released
focal
dne
bionic
dne
xenial
dne
trusty
dne
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38013
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M/
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013