Description
.NET and Visual Studio Denial of Service Vulnerability
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft .NET Core 3.1
3.1 to < 3.1.25affected
Microsoft .NET 5.0
5.0.0 to < 5.0.17affected
Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
15.0.0 to < 16.9.21affected
Microsoft Visual Studio 2019 for Mac version 8.10
8.1.0 to < 8.10.24affected
Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
16.11.0 to < 16.11.14affected
Microsoft Microsoft Visual Studio 2022 version 17.0
17.0.0 to < 17.0.10affected
Microsoft .NET 6.0
6.0.0 to < 6.0.5affected
Microsoft Microsoft Visual Studio 2022 version 17.1
17.0.0 to < 17.1.7affected
Microsoft PowerShell 7.0
7.0.0 to < 7.0.11affected
Microsoft PowerShell 7.2
7.2.0 to < 7.2.4affected
Microsoft Visual Studio 2022 for Mac version 17.0
17.0.0 to < 17.0.3affected
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23267 ↗
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-23267 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5FPEQ6BTYRGTS6IYCDTZW6YF5HLQ3BY/ ↗