PT-2022-7019
CVE-2022-38013
·
تاريخ النشر
2022-06-14
·
تاريخ التحديث
2026-10-01
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
.NET Core versions prior to 3.1.29
.NET 6.0 versions prior to 6.0.9
Description
A denial of service issue exists due to incorrect resource cleanup, allowing a remote attacker to cause a stack overflow by sending a customized payload during model binding. This may result in a denial of service attack.
Recommendations
For .NET Core 3.1 versions prior to 3.1.29, update to version 3.1.29 or later.
For .NET 6.0 versions prior to 6.0.9, update to version 6.0.9 or later.
As a temporary workaround, consider restricting access to the affected API endpoints until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾