USN-5609-1 — dotnet6 vulnerability

Summary

Graham Esau discovered that .NET 6 incorrectly parsed certain payloads
during model binding. An attacker could possibly use this issue to
cause a denial of service.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	dotnet6	6.0.109-0ubuntu1~22.04.1

Vulnerabilities 1

High 7.5

CVE-2022-38013

.NET Core and Visual Studio Denial of Service Vulnerability

.NET Core and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.2 .NET 6.0 Ubuntu Alpine NuGet

Sep 13, 2022

References

report
https://ubuntu.com/security/CVE-2022-38013

dotnet6 vulnerability

Summary

Fixed packages 1

Vulnerabilities 1

.NET Core and Visual Studio Denial of Service Vulnerability

References