Vulnerability CVE-2022-23267: Information

Description

.NET and Visual Studio Denial of Service Vulnerability

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2022-23267
Published: May 11, 2022
Modified: Dec. 21, 2023

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
dotnet-bootstrap-3.1p103.1.26-alt13.1.32-alt1ALT-PU-2023-1307-1315307Fixed
dotnet-bootstrap-3.1c10f13.1.26-alt13.1.32-alt1ALT-PU-2023-1307-1315307Fixed
dotnet-bootstrap-5.0p105.0.17-alt15.0.17-alt1ALT-PU-2023-1464-1316692Fixed
dotnet-bootstrap-5.0c10f15.0.17-alt15.0.17-alt1ALT-PU-2023-1464-1316692Fixed
dotnet-bootstrap-6.0sisyphus6.0.7-alt16.0.25-alt1ALT-PU-2022-2837-1304807Fixed
dotnet-bootstrap-6.0p106.0.12-alt16.0.25-alt1ALT-PU-2023-1305-1315307Fixed
dotnet-bootstrap-6.0c10f16.0.12-alt16.0.12-alt1ALT-PU-2023-1305-1315307Fixed
dotnet-bootstrap-6.0p116.0.7-alt16.0.25-alt1ALT-PU-2022-2837-1304807Fixed
dotnet-coreclr-3.1p103.1.26-alt13.1.32-alt1ALT-PU-2023-1308-1315307Fixed
dotnet-coreclr-3.1c10f13.1.26-alt13.1.32-alt1ALT-PU-2023-1308-1315307Fixed
dotnet-runtime-5.0p105.0.17-alt15.0.17-alt1ALT-PU-2023-1465-1316692Fixed
dotnet-runtime-5.0c10f15.0.17-alt15.0.17-alt1ALT-PU-2023-1465-1316692Fixed
dotnet-runtime-6.0sisyphus6.0.7-alt16.0.25-alt1ALT-PU-2022-2838-1304807Fixed
dotnet-runtime-6.0p106.0.12-alt26.0.25-alt1ALT-PU-2023-1306-1315307Fixed
dotnet-runtime-6.0c10f16.0.12-alt26.0.12-alt2ALT-PU-2023-1306-1315307Fixed
dotnet-runtime-6.0p116.0.7-alt16.0.25-alt1ALT-PU-2022-2838-1304807Fixed
powershellsisyphus7.2.5-alt17.4.1-alt1ALT-PU-2022-2263-1303853Fixed
powershellp107.3.6-alt17.3.6-alt1ALT-PU-2023-4713-2325842Fixed
powershellp117.2.5-alt17.4.1-alt1ALT-PU-2022-2263-1303853Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-23267
  • Patch
  • Vendor Advisory
FEDORA-2022-d69fee9f38
    FEDORA-2022-9a1d5ea33c
      FEDORA-2022-256d559f0c

          1. Configuration 1

            cpe:2.3:a:microsoft:.net:5.0:*:*:*:*:*:*:*
            cpe:2.3:a:microsoft:.net_core:3.1:-:*:*:*:*:*:*
            cpe:2.3:a:microsoft:visual_studio_2022:17.0:*:*:*:*:*:*:*
            cpe:2.3:a:microsoft:.net:6.0.0:-:*:*:*:*:*:*
            cpe:2.3:a:microsoft:visual_studio_2022:17.1:*:*:*:*:*:*:*
            cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
            Start including
            16.10
            End excliding
            16.11.14
            cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
            Start including
            16.0
            End excliding
            16.9.21
            cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*
            Start including
            7.0
            End excliding
            7.0.11
            cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*
            Start including
            7.2
            End excliding
            7.2.4

            Configuration 2

            cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
            cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
            cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
        VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
        Version: v24.5.3
        Back to top