CVE-2022-29117

Name of the Vulnerable Software and Affected Versions .NET Core 3.1 versions prior to 3.1.25 .NET 5.0 versions prior to 5.0.17 .NET 6.0 versions prior to 6.0.5

Description The issue is related to a Denial of Service vulnerability in .NET and Visual Studio, where a malicious client can manipulate cookies and cause a Denial of Service. This vulnerability exists due to incorrect cleanup or release of resources.

Recommendations For .NET Core 3.1 versions prior to 3.1.25, update to Runtime 3.1.25 or SDK 3.1.419. For .NET 5.0 versions prior to 5.0.17, update to Runtime 5.0.17 or SDK 5.0.214. For .NET 6.0 versions prior to 6.0.5, update to Runtime 6.0.5 or SDK 6.0.105.