CVE-2022-21986

Description

.NET Denial of Service Vulnerability

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.714

Associated Vulnerability

VulnerabilityOS Platform
Vulnerability CVE-2022-21986 are fixed in AspNet Core (x86) (6.0.2)Windows
Vulnerabilities CVE-2022-21986 are affected in Microsoft Visual Studio Community 2022 17.0.5Windows
Vulnerabilities CVE-2022-21986 are affected in Microsoft Visual Studio Enterprise 2022 17.0.5Windows
Vulnerabilities CVE-2022-21986 are affected in Microsoft Visual Studio Professional 2022 17.0.5Windows
Vulnerabilities CVE-2022-21986 are fixed in Microsoft Visual Studio Community 2019 16.11.10Windows
Vulnerabilities CVE-2022-21986 are fixed in Microsoft Visual Studio Community 2019 16.9.17Windows
Vulnerabilities CVE-2022-21986 are fixed in Microsoft Visual Studio Enterprise 2019 16.11.10Windows
Vulnerabilities CVE-2022-21986 are fixed in Microsoft Visual Studio Enterprise 2019 16.9.17Windows
Vulnerabilities CVE-2022-21986 are fixed in Microsoft Visual Studio Professional 2019 16.11.10Windows
Vulnerabilities CVE-2022-21986 are fixed in Microsoft Visual Studio Professional 2019 16.9.17Windows
Vulnerabilities CVE-2022-21986 are fixed in Microsoft Visual Studio Community 2022 17.0.6Windows
Vulnerabilities CVE-2022-21986 are fixed in Microsoft Visual Studio Enterprise 2022 17.0.6Windows
Vulnerabilities CVE-2022-21986 are fixed in Microsoft Visual Studio Professional 2022 17.0.6Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget-Microsoft.AspNetCore.App.Runtime.win-arm 5.0.14Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget-Microsoft.AspNetCore.App.Runtime.win-arm 6.0.2Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget-Microsoft.AspNetCore.App.Runtime.linux-arm 5.0.14Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget-Microsoft.AspNetCore.App.Runtime.linux-arm 6.0.2Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget-Microsoft.AspNetCore.App.Runtime.linux-musl-arm 5.0.14Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget-Microsoft.AspNetCore.App.Runtime.linux-musl-arm 6.0.2Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-arm64 5.0.14Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-arm64 6.0.2Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-musl-x64 5.0.14Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-musl-x64 6.0.2Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-x64 5.0.14Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-x64 6.0.2Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.osx-x64 5.0.14Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.osx-x64 6.0.2Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.win-x64 5.0.14Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.win-x64 6.0.2Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.win-x86 5.0.14Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.win-x86 6.0.2Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 5.0.14Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 6.0.2Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.win-arm64 5.0.14Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.win-arm64 6.0.2Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.osx-arm64 6.0.2Windows
Vulnerabilities CVE-2022-21986 are fixed in Nuget-Microsoft.AspNetCore.App.Runtime.win-arm for Linux 5.0.14Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget-Microsoft.AspNetCore.App.Runtime.win-arm for Linux 6.0.2Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget-Microsoft.AspNetCore.App.Runtime.linux-arm for Linux 5.0.14Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget-Microsoft.AspNetCore.App.Runtime.linux-arm for Linux 6.0.2Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget-Microsoft.AspNetCore.App.Runtime.linux-musl-arm for Linux 5.0.14Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget-Microsoft.AspNetCore.App.Runtime.linux-musl-arm for Linux 6.0.2Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-arm64 for Linux 5.0.14Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-arm64 for Linux 6.0.2Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-musl-x64 for Linux 5.0.14Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-musl-x64 for Linux 6.0.2Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-x64 for Linux 5.0.14Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-x64 for Linux 6.0.2Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.osx-x64 for Linux 5.0.14Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.osx-x64 for Linux 6.0.2Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.win-x64 for Linux 5.0.14Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.win-x64 for Linux 6.0.2Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.win-x86 for Linux 5.0.14Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.win-x86 for Linux 6.0.2Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 for Linux 5.0.14Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 for Linux 6.0.2Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.win-arm64 for Linux 5.0.14Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.win-arm64 for Linux 6.0.2Linux
Vulnerabilities CVE-2022-21986 are fixed in Nuget - Microsoft.AspNetCore.App.Runtime.osx-arm64 for Linux 6.0.2Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-109462Update for AspNet Core (x86) (6.0.13)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234