Skip to content
OpenAdvisories
High MSRC-CVE-2022-23267 1 CVE

.NET and Visual Studio Denial of Service Vulnerability

Published May 10, 2022 · Updated Jun 14, 2022 · Revision 3

Vendor: Microsoft

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Security updates
3.1.25 — https://support.microsoft.com/help/5014326
5.0.17 — https://support.microsoft.com/help/5014329
16.9.21 — https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.9
8.10.24 — https://docs.microsoft.com/visualstudio/releasenotes/vs2019-mac-relnotes
16.11.14 — https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11
17.0.10 — https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes
6.0.5 — https://support.microsoft.com/help/5014330
17.1.7 — https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes-v17.1.md
7.0.11 — https://github.com/PowerShell/Announcements/issues/32
17.0.3 — https://docs.microsoft.com/en-us/visualstudio/releases/2022/mac-release-notes

Vulnerabilities 1

Revision history

  1. #3

    Revised the Security Updates table to include Visual Studio 2019 for Mac and Visual Studio 2022 for Mac because these versions of Visual Studio for Mac are affected by this vulnerability. Microsoft strongly recommends that customers running these versions of Visual Studio install the updates to be fully protected from the vulnerability.

  2. #2

    Revised the Security Updates table to include PowerShell 7.0 and PowerShell 7.2 because these versions of PowerShell 7 are affected by this vulnerability. See [https://github.com/PowerShell/Announcements/issues/32](https://github.com/PowerShell/Announcements/issues/32) for more information. In addition the Security Updates table was updated to include Visual Studio 2019 version 16.11 as it is also affected by this vulnerability. Customers who have already installed the May 2022 security updates for Visual Studio 2019 version 16.11 do not need to take any further action.

  3. #1

    Information published.

References