PT-2022-4629
CVE-2022-29117
·
تاريخ النشر
2022-05-10
·
تاريخ التحديث
2026-05-27
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
.NET Core 3.1 versions prior to 3.1.25
.NET 5.0 versions prior to 5.0.17
.NET 6.0 versions prior to 6.0.5
Description
The issue is related to a Denial of Service vulnerability in .NET and Visual Studio, where a malicious client can manipulate cookies and cause a Denial of Service. This vulnerability exists due to incorrect cleanup or release of resources.
Recommendations
For .NET Core 3.1 versions prior to 3.1.25, update to Runtime 3.1.25 or SDK 3.1.419.
For .NET 5.0 versions prior to 5.0.17, update to Runtime 5.0.17 or SDK 5.0.214.
For .NET 6.0 versions prior to 6.0.5, update to Runtime 6.0.5 or SDK 6.0.105.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾