CVE-2022-21986 : .NET Denial of Service Vulnerability

.NET Denial of Service Vulnerability

Published 2022-02-09 17:15:09

Updated 2023-06-29 05:15:10

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2022-21986

Microsoft » Visual Studio 2019
Versions from including (>=) 16.0 and up to, including, (<=) 16.11
cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Visual Studio 2019 » For Macos
Versions from including (>=) 8.10 and before (<) 8.10.18
cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:macos:*:*
Matching versions
Microsoft » .net
Versions from including (>=) 6.0.0 and before (<) 6.0.2
cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
Matching versions
Microsoft » .net
Versions from including (>=) 5.0 and before (<) 5.0.14
cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Visual Studio 2022
Versions from including (>=) 17.0 and before (<) 17.0.6
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 34
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 35
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.42%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 61 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	Microsoft Corporation
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986

CVE-2022-21986 - Security Update Guide - Microsoft - .NET Denial of Service Vulnerability
Patch;Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21986

CVE-2022-21986 - Security Update Guide - Microsoft - .NET Denial of Service Vulnerability
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/

[SECURITY] Fedora 34 Update: dotnet6.0-6.0.102-1.fc34 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/

[SECURITY] Fedora 35 Update: dotnet6.0-6.0.102-1.fc35 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory

Jump to