Skip to content
OpenAdvisories
Low MSRC-CVE-2022-30130 1 CVE

.NET Framework Denial of Service Vulnerability

Published May 10, 2022 · Updated Dec 15, 2022 · Revision 4

Vendor: Microsoft

Summary

Impact: Denial of Service. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Security updates
4.7.03946.07 — https://support.microsoft.com/help/5013870
4.7.03946.05 — https://support.microsoft.com/help/5013837
4.7.03946.02 — https://support.microsoft.com/help/5013872
4.7.03946.03 — https://support.microsoft.com/help/5013839
4.7.03946.02 — https://support.microsoft.com/help/5013871
4.7.03946.03 — https://support.microsoft.com/help/5013838
4.7.03946.07 — https://support.microsoft.com/help/5013873
4.7.03946.05 — https://support.microsoft.com/help/5013840
10.0.10240.19624 — https://support.microsoft.com/help/5021243

Vulnerabilities 1

Revision history

  1. #4

    The following revisions have been made: 1) Added .NET Framework 3.5 and 4.6/4.6.2 installed on Windows 10 for 32-bit Systems and Windows 10 for x65-based Systems as .NET 4.6 installed on Windows 10 is supported. 2) Removed .NET Framework 3.5 and 4.6.2 installed on Windows 10 for 32-bit Systems and Windows 10 for x65-based Systems. Microsoft strongly recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.

  2. #3

    In the Security Updates table made the following revisions: 1) Added .NET Framework 3.5 and 4.6.2 installed on Windows 10 for 32-bit Systems and Windows 10 for x65-based Systems as they are affected by this vulnerability. Microsoft strongly recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action. 2) Removed .NET Framework 4.6 and .NET Framework 4.6.1 installed on supported editions of Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 as these versions of .NET Framework are no longer supported.

  3. #2

    To comprehensively address this vulnerability, Microsoft has released Monthly Rollup KB5016268 for .NET Framework 3.5 installed on Windows 8.1 and Windows Server 2012 R2. Microsoft strongly recommends that customers install the update to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.

  4. #1

    Information published.

References