{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": ".NET 6.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": ".NET 5.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-21986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21986"
    }
  ],
  "links": [],
  "reference": "CERTFR-2022-AVI-131",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-02-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eMicrosoft\n.Net\u003c/span\u003e. Elle permet \u00e0 un attaquant de provoquer un d\u00e9ni de service\n\u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Microsoft .Net",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 08 f\u00e9vrier 2022",
      "url": "https://msrc.microsoft.com/update-guide/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "OneDrive pour Android",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "PowerBI-client JS SDK",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Teams pour Android",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Data Explorer",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "SQL Server 2019 pour Linux Containers",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Teams Admin Center",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Teams pour iOS",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "HEVC Video Extensions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "VP9 Video Extensions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio 2019 pour Mac version 8.10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio Code",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft 365 Apps pour Enterprise pour syst\u00e8mes 32 bits",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft 365 Apps pour Enterprise pour 64 bits Systems",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "HEVC Video Extension",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Dynamics GP",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Dynamics 365 (on-premises) version 9.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Dynamics 365 (on-premises) version 8.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-23254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23254"
    },
    {
      "name": "CVE-2022-21986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21986"
    },
    {
      "name": "CVE-2022-23273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23273"
    },
    {
      "name": "CVE-2022-21844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21844"
    },
    {
      "name": "CVE-2022-21965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21965"
    },
    {
      "name": "CVE-2022-21991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21991"
    },
    {
      "name": "CVE-2022-23271",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23271"
    },
    {
      "name": "CVE-2022-22004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22004"
    },
    {
      "name": "CVE-2022-22003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22003"
    },
    {
      "name": "CVE-2022-21957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21957"
    },
    {
      "name": "CVE-2022-21927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21927"
    },
    {
      "name": "CVE-2022-21926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21926"
    },
    {
      "name": "CVE-2022-22709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22709"
    },
    {
      "name": "CVE-2022-22716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22716"
    },
    {
      "name": "CVE-2022-23256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23256"
    },
    {
      "name": "CVE-2022-23252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23252"
    },
    {
      "name": "CVE-2022-23276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23276"
    },
    {
      "name": "CVE-2022-23272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23272"
    },
    {
      "name": "CVE-2022-23269",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23269"
    },
    {
      "name": "CVE-2022-23274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23274"
    },
    {
      "name": "CVE-2022-23255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23255"
    },
    {
      "name": "CVE-2022-21988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21988"
    }
  ],
  "links": [],
  "reference": "CERTFR-2022-AVI-132",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-02-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Usurpation d\u0027identit\u00e9"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eles produits Microsoft\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es, une usurpation d\u0027identit\u00e9, un d\u00e9ni de\nservice, un contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9 et une\nex\u00e9cution de code \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 08 f\u00e9vrier 2022",
      "url": "https://msrc.microsoft.com/update-guide/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": ".NET 6.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": ".NET 5.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-21986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21986"
    }
  ],
  "links": [],
  "reference": "CERTFR-2022-AVI-131",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-02-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eMicrosoft\n.Net\u003c/span\u003e. Elle permet \u00e0 un attaquant de provoquer un d\u00e9ni de service\n\u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Microsoft .Net",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 08 f\u00e9vrier 2022",
      "url": "https://msrc.microsoft.com/update-guide/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "OneDrive pour Android",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "PowerBI-client JS SDK",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Teams pour Android",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Data Explorer",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "SQL Server 2019 pour Linux Containers",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Teams Admin Center",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Teams pour iOS",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "HEVC Video Extensions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "VP9 Video Extensions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio 2019 pour Mac version 8.10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio Code",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft 365 Apps pour Enterprise pour syst\u00e8mes 32 bits",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft 365 Apps pour Enterprise pour 64 bits Systems",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "HEVC Video Extension",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Dynamics GP",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Dynamics 365 (on-premises) version 9.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Dynamics 365 (on-premises) version 8.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-23254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23254"
    },
    {
      "name": "CVE-2022-21986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21986"
    },
    {
      "name": "CVE-2022-23273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23273"
    },
    {
      "name": "CVE-2022-21844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21844"
    },
    {
      "name": "CVE-2022-21965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21965"
    },
    {
      "name": "CVE-2022-21991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21991"
    },
    {
      "name": "CVE-2022-23271",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23271"
    },
    {
      "name": "CVE-2022-22004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22004"
    },
    {
      "name": "CVE-2022-22003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22003"
    },
    {
      "name": "CVE-2022-21957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21957"
    },
    {
      "name": "CVE-2022-21927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21927"
    },
    {
      "name": "CVE-2022-21926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21926"
    },
    {
      "name": "CVE-2022-22709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22709"
    },
    {
      "name": "CVE-2022-22716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22716"
    },
    {
      "name": "CVE-2022-23256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23256"
    },
    {
      "name": "CVE-2022-23252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23252"
    },
    {
      "name": "CVE-2022-23276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23276"
    },
    {
      "name": "CVE-2022-23272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23272"
    },
    {
      "name": "CVE-2022-23269",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23269"
    },
    {
      "name": "CVE-2022-23274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23274"
    },
    {
      "name": "CVE-2022-23255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23255"
    },
    {
      "name": "CVE-2022-21988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21988"
    }
  ],
  "links": [],
  "reference": "CERTFR-2022-AVI-132",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-02-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Usurpation d\u0027identit\u00e9"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eles produits Microsoft\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es, une usurpation d\u0027identit\u00e9, un d\u00e9ni de\nservice, un contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9 et une\nex\u00e9cution de code \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 08 f\u00e9vrier 2022",
      "url": "https://msrc.microsoft.com/update-guide/"
    }
  ]
}

{
  "CVSS 2.0": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "TO708, TO714, TO716",
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": "TO708 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Visual Studio 2019 16.11.30, TO714 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Visual Studio 2019 16.9.26, TO716 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Visual Studio 2019 16.11.21",
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Red Hat, Inc., Microsoft Corp, Fedora Project, IBM Corp.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "8 (Red Hat Enterprise Linux), 5.0 (ASP.NET Core), \u043e\u0442 16.0 \u0434\u043e 16.8 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Microsoft Visual Studio 2019), 34 (Fedora), 8.10 (Microsoft Visual Studio 2019), 35 (Fedora), 6.0 (ASP.NET Core), 17.0 (Microsoft Visual Studio 2022), \u043e\u0442 16.0 \u0434\u043e 16.10 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Microsoft Visual Studio 2019), \u0434\u043e 21.0.2.2 (IBM Robotic Process Automation)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f  ASP.NET Core:\nhttps://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-21986\nhttps://github.com/dotnet/aspnetcore/issues/40072\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 IBM Corp.:\nhttps://www.ibm.com/support/pages/node/6614453\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/CVE-2022-21986\n\n\u0414\u043b\u044f Fedora:\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "08.02.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "31.07.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "09.03.2022",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-01176",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2022-21986, SB2022020821",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Red Hat Enterprise Linux, ASP.NET Core, Microsoft Visual Studio 2019, Fedora, Microsoft Visual Studio 2022, IBM Robotic Process Automation",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Red Hat, Inc. Red Hat Enterprise Linux 8 , Fedora Project Fedora 34 , Fedora Project Fedora 35 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ASP.NET Core \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Microsoft Visual Studio, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ASP.NET Core \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Microsoft Visual Studio \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-21986\nhttps://github.com/dotnet/aspnetcore/issues/40072\nhttps://access.redhat.com/security/cve/CVE-2022-21986\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/\nhttps://www.cybersecurity-help.cz/vdb/SB2022020821\nhttps://www.ibm.com/support/pages/node/6614453",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,1)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

{
  "affected": [
    {
      "affectedData": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.9.17",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.11.10",
              "status": "affected",
              "version": "16.11.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Visual Studio 2022 version 17.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.0.6",
              "status": "affected",
              "version": "17.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Visual Studio 2019 for Mac version 8.10",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "8.10.18",
              "status": "affected",
              "version": "8.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": ".NET 5.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "5.0.14",
              "status": "affected",
              "version": "5.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": ".NET 6.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.2",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "secure@microsoft.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "784A6ABC-33DC-4E8E-9236-60B1D06F97A3",
              "versionEndExcluding": "5.0.14",
              "versionStartIncluding": "5.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "44F0F99C-213A-405F-878D-752EC049D66E",
              "versionEndExcluding": "6.0.2",
              "versionStartIncluding": "6.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:macos:*:*",
              "matchCriteriaId": "E52E5F11-3D97-4755-B49E-2E3C2CCAA365",
              "versionEndExcluding": "8.10.18",
              "versionStartIncluding": "8.10",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9984FFB-8AFA-438F-B762-B98649B64B23",
              "versionEndIncluding": "16.11",
              "versionStartIncluding": "16.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EAA3B633-7F8C-40C4-9AA5-0CF3BFE2C17D",
              "versionEndExcluding": "17.0.6",
              "versionStartIncluding": "17.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
              "matchCriteriaId": "A930E247-0B43-43CB-98FF-6CE7B8189835",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
              "matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": ".NET Denial of Service Vulnerability"
    },
    {
      "lang": "es",
      "value": "Una Vulnerabilidad de Denegaci\u00f3n de Servicio en .NET"
    }
  ],
  "id": "CVE-2022-21986",
  "lastModified": "2026-06-17T04:27:24.873",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "secure@microsoft.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2022-02-09T17:15:08.907",
  "references": [
    {
      "source": "secure@microsoft.com",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21986"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21986"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.osx-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2022-21986"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": true,
    "github_reviewed_at": "2022-10-21T20:29:04Z",
    "nvd_published_at": "2022-02-09T17:15:00Z",
    "severity": "HIGH"
  },
  "details": "Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0 and .NET 5.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nA Denial of Service vulnerability exists in .NET 6.0 and .NET 5.0 when the Kestrel web server processes certain HTTP/2 and HTTP/3 requests.\n\n### Affected Software\n\n* Any .NET 6.0 application running on .NET 6.0.1 or lower.\n* Any .NET 5.0 application running on .NET 5.0.13 or lower.\n\n### Patches\nTo fix the issue, please install the latest version of .NET 6.0 or .NET 5.0. If you have installed one or more .NET SDKs through Visual Studio, Visual Studio will prompt you to update Visual Studio, which will also update your .NET  SDKs.\n\n* If you\u0027re using .NET Core 6.0, you should download and install Runtime 6.0.2 or SDK 6.0.102 (for Visual Studio 2022 v17.1) from https://dotnet.microsoft.com/download/dotnet-core/6.0.\n\n* If you\u0027re using .NET 5.0, you should download and install Runtime 5.0.14 or SDK 5.0.114 (for Visual Studio 2019 v16.8) or SDK 5.0.405 (for Visual Studio 2011 v16.11) from https://dotnet.microsoft.com/download/dotnet-core/5.0.\n\n\n.NET 6.0 and .NET 5.0 updates are also available from Microsoft Update. To access this either type \"Check for updates\" in your Windows search, or open Settings, choose Update \u0026 Security and then click Check for Updates.\n\n#### Other Details\n\n- Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/207\n- An Issue for this can be found at https://github.com/dotnet/aspnetcore/issues/40072\n- MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-21986",
  "id": "GHSA-x459-p2rx-f8ff",
  "modified": "2022-10-21T20:29:04Z",
  "published": "2022-10-21T20:29:04Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-x459-p2rx-f8ff"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21986"
    },
    {
      "type": "WEB",
      "url": "https://github.com/dotnet/announcements/issues/207"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/dotnet/aspnetcore"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21986"
    },
    {
      "type": "WEB",
      "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": ".NET Denial of Service Vulnerability"
}

{
  "GSD": {
    "alias": "CVE-2022-21986",
    "description": ".NET Denial of Service Vulnerability.",
    "id": "GSD-2022-21986",
    "references": [
      "https://access.redhat.com/errata/RHSA-2022:0500",
      "https://access.redhat.com/errata/RHSA-2022:0499",
      "https://access.redhat.com/errata/RHSA-2022:0496",
      "https://access.redhat.com/errata/RHSA-2022:0495",
      "https://linux.oracle.com/cve/CVE-2022-21986.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-21986"
      ],
      "details": ".NET Denial of Service Vulnerability",
      "id": "GSD-2022-21986",
      "modified": "2023-12-13T01:19:14.992287Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@microsoft.com",
        "ID": "CVE-2022-21986",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "15.0.0",
                          "version_value": "16.9.17"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "16.11.0",
                          "version_value": "16.11.10"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2022 version 17.0",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "17.0.0",
                          "version_value": "17.0.6"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Visual Studio 2019 for Mac version 8.10",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "8.1.0",
                          "version_value": "8.10.18"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": ".NET 5.0",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "5.0.0",
                          "version_value": "5.0.14"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": ".NET 6.0",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.0.0",
                          "version_value": "6.0.2"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Microsoft"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": ".NET Denial of Service Vulnerability"
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Denial of Service"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21986",
            "refsource": "MISC",
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21986"
          }
        ]
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "[5.0.0,5.0.14),[6.0.0,6.0.2)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.14, all versions starting from 6.0.0 before 6.0.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET Denial of Service Vulnerability.",
          "fixed_versions": [
            "5.0.14",
            "6.0.2"
          ],
          "identifier": "CVE-2022-21986",
          "identifiers": [
            "GHSA-x459-p2rx-f8ff",
            "CVE-2022-21986"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.14 before 6.0.0, all versions starting from 6.0.2",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-arm",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 5.0.14, 6.0.2 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-x459-p2rx-f8ff",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-21986",
            "https://github.com/dotnet/announcements/issues/207",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986",
            "https://github.com/advisories/GHSA-x459-p2rx-f8ff"
          ],
          "uuid": "04262d27-6b75-43c4-8fca-a8f7b6794038"
        },
        {
          "affected_range": "[5.0.0,5.0.14),[6.0.0,6.0.2)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.14, all versions starting from 6.0.0 before 6.0.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET Denial of Service Vulnerability.",
          "fixed_versions": [
            "5.0.14",
            "6.0.2"
          ],
          "identifier": "CVE-2022-21986",
          "identifiers": [
            "GHSA-x459-p2rx-f8ff",
            "CVE-2022-21986"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.14 before 6.0.0, all versions starting from 6.0.2",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 5.0.14, 6.0.2 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-x459-p2rx-f8ff",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-21986",
            "https://github.com/dotnet/announcements/issues/207",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986",
            "https://github.com/advisories/GHSA-x459-p2rx-f8ff"
          ],
          "uuid": "5061ab22-63c3-4bc7-869d-7aa573d7ab5a"
        },
        {
          "affected_range": "[5.0.0,5.0.14),[6.0.0,6.0.2)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.14, all versions starting from 6.0.0 before 6.0.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET Denial of Service Vulnerability.",
          "fixed_versions": [
            "5.0.14",
            "6.0.2"
          ],
          "identifier": "CVE-2022-21986",
          "identifiers": [
            "GHSA-x459-p2rx-f8ff",
            "CVE-2022-21986"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.14 before 6.0.0, all versions starting from 6.0.2",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 5.0.14, 6.0.2 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-x459-p2rx-f8ff",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-21986",
            "https://github.com/dotnet/announcements/issues/207",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986",
            "https://github.com/advisories/GHSA-x459-p2rx-f8ff"
          ],
          "uuid": "a3871b11-192f-4070-ae94-b515049ace7c"
        },
        {
          "affected_range": "[5.0.0,5.0.14),[6.0.0,6.0.2)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.14, all versions starting from 6.0.0 before 6.0.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET Denial of Service Vulnerability.",
          "fixed_versions": [
            "5.0.14",
            "6.0.2"
          ],
          "identifier": "CVE-2022-21986",
          "identifiers": [
            "GHSA-x459-p2rx-f8ff",
            "CVE-2022-21986"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.14 before 6.0.0, all versions starting from 6.0.2",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 5.0.14, 6.0.2 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-x459-p2rx-f8ff",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-21986",
            "https://github.com/dotnet/announcements/issues/207",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986",
            "https://github.com/advisories/GHSA-x459-p2rx-f8ff"
          ],
          "uuid": "2cf872de-7a82-4aef-b0bc-a60522c3bbc4"
        },
        {
          "affected_range": "[5.0.0,5.0.14),[6.0.0,6.0.2)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.14, all versions starting from 6.0.0 before 6.0.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET Denial of Service Vulnerability.",
          "fixed_versions": [
            "5.0.14",
            "6.0.2"
          ],
          "identifier": "CVE-2022-21986",
          "identifiers": [
            "GHSA-x459-p2rx-f8ff",
            "CVE-2022-21986"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.14 before 6.0.0, all versions starting from 6.0.2",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 5.0.14, 6.0.2 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-x459-p2rx-f8ff",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-21986",
            "https://github.com/dotnet/announcements/issues/207",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986",
            "https://github.com/advisories/GHSA-x459-p2rx-f8ff"
          ],
          "uuid": "f69a0fc9-d56a-4a03-95ed-a9a4043a6852"
        },
        {
          "affected_range": "[5.0.0,5.0.14),[6.0.0,6.0.2)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.14, all versions starting from 6.0.0 before 6.0.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET Denial of Service Vulnerability.",
          "fixed_versions": [
            "5.0.14",
            "6.0.2"
          ],
          "identifier": "CVE-2022-21986",
          "identifiers": [
            "GHSA-x459-p2rx-f8ff",
            "CVE-2022-21986"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.14 before 6.0.0, all versions starting from 6.0.2",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-x64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 5.0.14, 6.0.2 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-x459-p2rx-f8ff",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-21986",
            "https://github.com/dotnet/announcements/issues/207",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986",
            "https://github.com/advisories/GHSA-x459-p2rx-f8ff"
          ],
          "uuid": "53830843-39f9-4294-a542-3719a670ffb5"
        },
        {
          "affected_range": "[6.0.0,6.0.2)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET Denial of Service Vulnerability.",
          "fixed_versions": [
            "6.0.2"
          ],
          "identifier": "CVE-2022-21986",
          "identifiers": [
            "GHSA-x459-p2rx-f8ff",
            "CVE-2022-21986"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.2",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to version 6.0.2 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-x459-p2rx-f8ff",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-21986",
            "https://github.com/dotnet/announcements/issues/207",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986",
            "https://github.com/advisories/GHSA-x459-p2rx-f8ff"
          ],
          "uuid": "aead55dd-b99f-4a98-a34b-cd37e1f040e9"
        },
        {
          "affected_range": "[5.0.0,5.0.14),[6.0.0,6.0.2)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.14, all versions starting from 6.0.0 before 6.0.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET Denial of Service Vulnerability.",
          "fixed_versions": [
            "5.0.14",
            "6.0.2"
          ],
          "identifier": "CVE-2022-21986",
          "identifiers": [
            "GHSA-x459-p2rx-f8ff",
            "CVE-2022-21986"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.14 before 6.0.0, all versions starting from 6.0.2",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.osx-x64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 5.0.14, 6.0.2 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-x459-p2rx-f8ff",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-21986",
            "https://github.com/dotnet/announcements/issues/207",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986",
            "https://github.com/advisories/GHSA-x459-p2rx-f8ff"
          ],
          "uuid": "254cf66a-10a9-419c-9943-0b08f6acee5c"
        },
        {
          "affected_range": "[5.0.0,5.0.14),[6.0.0,6.0.2)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.14, all versions starting from 6.0.0 before 6.0.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET Denial of Service Vulnerability.",
          "fixed_versions": [
            "5.0.14",
            "6.0.2"
          ],
          "identifier": "CVE-2022-21986",
          "identifiers": [
            "GHSA-x459-p2rx-f8ff",
            "CVE-2022-21986"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.14 before 6.0.0, all versions starting from 6.0.2",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.win-arm",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 5.0.14, 6.0.2 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-x459-p2rx-f8ff",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-21986",
            "https://github.com/dotnet/announcements/issues/207",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986",
            "https://github.com/advisories/GHSA-x459-p2rx-f8ff"
          ],
          "uuid": "f9d171c6-1e21-496c-829b-cd73465ab9f5"
        },
        {
          "affected_range": "[5.0.0,5.0.14),[6.0.0,6.0.2)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.14, all versions starting from 6.0.0 before 6.0.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET Denial of Service Vulnerability.",
          "fixed_versions": [
            "5.0.14",
            "6.0.2"
          ],
          "identifier": "CVE-2022-21986",
          "identifiers": [
            "GHSA-x459-p2rx-f8ff",
            "CVE-2022-21986"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.14 before 6.0.0, all versions starting from 6.0.2",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.win-arm64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 5.0.14, 6.0.2 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-x459-p2rx-f8ff",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-21986",
            "https://github.com/dotnet/announcements/issues/207",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986",
            "https://github.com/advisories/GHSA-x459-p2rx-f8ff"
          ],
          "uuid": "49000c19-e0e2-4283-96d7-acc6ee299ed2"
        },
        {
          "affected_range": "[5.0.0,5.0.14),[6.0.0,6.0.2)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.14, all versions starting from 6.0.0 before 6.0.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET Denial of Service Vulnerability.",
          "fixed_versions": [
            "5.0.14",
            "6.0.2"
          ],
          "identifier": "CVE-2022-21986",
          "identifiers": [
            "GHSA-x459-p2rx-f8ff",
            "CVE-2022-21986"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.14 before 6.0.0, all versions starting from 6.0.2",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.win-x64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 5.0.14, 6.0.2 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-x459-p2rx-f8ff",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-21986",
            "https://github.com/dotnet/announcements/issues/207",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986",
            "https://github.com/advisories/GHSA-x459-p2rx-f8ff"
          ],
          "uuid": "0063cbfa-63e6-45e2-b69b-f3d3359ffe32"
        },
        {
          "affected_range": "[5.0.0,5.0.14),[6.0.0,6.0.2)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.14, all versions starting from 6.0.0 before 6.0.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET Denial of Service Vulnerability.",
          "fixed_versions": [
            "5.0.14",
            "6.0.2"
          ],
          "identifier": "CVE-2022-21986",
          "identifiers": [
            "GHSA-x459-p2rx-f8ff",
            "CVE-2022-21986"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.14 before 6.0.0, all versions starting from 6.0.2",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.win-x86",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 5.0.14, 6.0.2 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-x459-p2rx-f8ff",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-21986",
            "https://github.com/dotnet/announcements/issues/207",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HMQOHV7G5TF6OMBN6DNTDOKQQU7KHMM/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCTBSBE3PNIMXG6ALX2CQG4ZEH7W3YAT/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986",
            "https://github.com/advisories/GHSA-x459-p2rx-f8ff"
          ],
          "uuid": "4316b050-6272-4275-809f-5ffca84293df"
        },
        {
          "affected_range": "[5.0,5.0.14),[6.0.0,6.0.2)",
          "affected_versions": "All versions starting from 5.0 before 5.0.14, all versions starting from 6.0.0 before 6.0.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-04-01",
          "description": ".NET Denial of Service Vulnerability, This vulnerability affects applications that utilize the Kestrel web server when processing certain HTTP/2 and HTTP/3 requests.",
          "fixed_versions": [
            "5.0.14",
            "6.0.2"
          ],
          "identifier": "CVE-2022-21986",
          "identifiers": [
            "CVE-2022-21986"
          ],
          "not_impacted": "All versions starting from 5.0.14 before 6.0.0, all versions starting from 6.0.2",
          "package_slug": "nuget/System.Text.Encodings.Web",
          "pubdate": "2022-02-09",
          "solution": "Upgrade to version 5.0.14, 6.0.2 or above.",
          "title": "Denial Of Service",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2022-21986",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21986"
          ],
          "uuid": "46ce912d-1c20-4929-9c12-7156027500ac"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "16.11",
                "versionStartIncluding": "16.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "5.0.14",
                "versionStartIncluding": "5.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.0.2",
                "versionStartIncluding": "6.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:macos:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.10.18",
                "versionStartIncluding": "8.10",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "17.0.6",
                "versionStartIncluding": "17.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2022-21986"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": ".NET Denial of Service Vulnerability"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21986",
              "refsource": "MISC",
              "tags": [],
              "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21986"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2023-06-29T05:15Z",
      "publishedDate": "2022-02-09T17:15Z"
    }
  }
}