Description
.NET Framework Information Disclosure Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 | 3.0.0.0 – < 10.0.14393.5501 | 10.0.14393.5501 |
| Microsoft | Microsoft .NET Framework 4.6.2 | 4.7.0 – < 4.7.04005.02 | 4.7.04005.02 |
| Microsoft | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 | 4.7.0 – < 4.7.04005.02 | 4.7.04005.02 |
| Microsoft | Microsoft .NET Framework 4.6/4.6.2 | 10.0.0.0 – < 10.0.10240.19567 | 10.0.10240.19567 |
| Microsoft | Microsoft .NET Framework 4.7.2 | 10.0.0.0 – < 10.0.04005.02 | 10.0.04005.02 |
| Microsoft | Microsoft .NET Framework 4.8 | 4.8.0 – < 4.8.04584.08 | 4.8.04584.08 |
| Microsoft | Microsoft .NET Framework 4.8.1 | 4.8.0.0 – < 4.8.09110.07 | 4.8.09110.07 |
| Microsoft | Nuget 2.1.2 | 1.0.0 – < 2.1.2 | 2.1.2 |
| Microsoft | Nuget 4.8.5 | 1.0.0 – < 4.8.4 | 4.8.4 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Microsoft.Data.SqlClient | < 1.1.4 | 1.1.4 | GHSA-8g2p-5pqh-5jmc |
| NuGet | Microsoft.Data.SqlClient | >= 2.0.0, < 2.1.2 | 2.1.2 | GHSA-8g2p-5pqh-5jmc |
| NuGet | System.Data.SqlClient | < 4.8.5 | 4.8.5 | GHSA-8g2p-5pqh-5jmc |
Advisories 1
- MSRC-CVE-2022-41064 .NET Framework Information Disclosure Vulnerability Microsoft Security Response Center · Feb 1, 2023
References
- .NET Framework Information Disclosure Vulnerability vendor-advisory patch