CVE-2022-38013
High · 7.5CVSS
7.5
EPSS
4.0%
Published
Sep 13, 2022
CISA due date
—
Cloudanix analysis
Attackers can send bad data that makes certain email-related software on old Ubuntu systems stop responding, causing temporary outages until fixed.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- Application
- Class
- Denial of service
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
The flaw permits unauthenticated remote attackers to trigger resource exhaustion or application crashes in affected .NET Core, Visual Studio, or cgiemail components via specially crafted network input, resulting in denial of service.
Why it matters to the business
Service availability is disrupted for applications using the vulnerable packages on Ubuntu 14.04 LTS and 16.04 LTS, leading to operational downtime; low urgency since the issue is not cataloged in CISA KEV and EPSS remains modest though rising 24% over 30 days.
How an attack unfolds
An attacker sends a crafted request over the network to the exposed service; the malformed input triggers the unhandled condition that exhausts resources or terminates the process, achieving denial of service without authentication or user interaction.
How to fix it
Upgrade cgiemail on Ubuntu 14.04 LTS to 1.6-37+deb7u1build0.14.04.1 and on Ubuntu 16.04 LTS to 1.6-37+deb7u1build0.16.04.1; apply equivalent patches for .NET Core and Visual Studio components; disable unnecessary network exposure until updates are installed.
How to confirm the fix worked
Verify installed package versions match the listed fixed releases using dpkg or apt; retest affected endpoints with benign traffic to confirm service stability; monitor process uptime and resource metrics post-deployment.
Typical attack path
- Scan for publicly reachable instances of cgiemail or .NET services on Ubuntu 14.04/16.04
- Craft and transmit a malicious payload targeting the vulnerable parsing or request-handling path
- Observe service crash or sustained resource consumption confirming successful DoS
How to detect it
Review web server and application logs for sudden spikes in malformed requests followed by process terminations or high CPU/memory usage; correlate with service restart events in system logs.
What your security team should do
- Prioritize patching the listed Ubuntu cgiemail packages within standard maintenance windows given the 1485-day exposure window
- Harden network access controls to limit exposure of the affected services
- Track EPSS trend for any future increase that may warrant expedited deployment
The record
.NET Core and Visual Studio Denial of Service Vulnerability
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-arm | 3.1.0 | 3.1.29 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-arm | 5.0.0 | 6.0.9 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-arm64 | 3.1.0 | 3.1.29 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-arm64 | 5.0.0 | 6.0.9 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-musl-arm | 5.0.0 | 6.0.9 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | 3.1.0 | 3.1.29 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | 5.0.0 | 6.0.9 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | 3.1.0 | 3.1.29 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | 5.0.0 | 6.0.9 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-x64 | 3.1.0 | 3.1.29 |
| NuGet | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.0 | 6.0.9 |
| NuGet | Microsoft.AspNetCore.App.Runtime.osx-arm64 | 5.0.0 | 6.0.9 |
| NuGet | Microsoft.AspNetCore.App.Runtime.osx-x64 | 3.1.0 | 3.1.29 |
| NuGet | Microsoft.AspNetCore.App.Runtime.osx-x64 | 5.0.0 | 6.0.9 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-arm | 3.1.0 | 3.1.29 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-arm | 5.0.0 | 6.0.9 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-arm64 | 3.1.0 | 3.1.29 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-arm64 | 5.0.0 | 6.0.9 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-x64 | 3.1.0 | 3.1.29 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-x64 | 5.0.0 | 6.0.9 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-x86 | 3.1.0 | 3.1.29 |
| NuGet | Microsoft.AspNetCore.App.Runtime.win-x86 | 5.0.0 | 6.0.9 |
| AlmaLinux:8 | aspnetcore-runtime-3.1 | 0 | 3.1.29-1.el8_6 |
| AlmaLinux:8 | aspnetcore-runtime-6.0 | 0 | 6.0.9-1.el8_6 |
| AlmaLinux:8 | aspnetcore-targeting-pack-3.1 | 0 | 3.1.29-1.el8_6 |
| AlmaLinux:8 | aspnetcore-targeting-pack-6.0 | 0 | 6.0.9-1.el8_6 |
| AlmaLinux:8 | dotnet | 0 | 6.0.109-1.el8_6 |
| AlmaLinux:8 | dotnet-apphost-pack-3.1 | 0 | 3.1.29-1.el8_6 |
| AlmaLinux:8 | dotnet-apphost-pack-6.0 | 0 | 6.0.9-1.el8_6 |
| AlmaLinux:8 | dotnet-host | 0 | 6.0.9-1.el8_6 |
| AlmaLinux:8 | dotnet-hostfxr-3.1 | 0 | 3.1.29-1.el8_6 |
| AlmaLinux:8 | dotnet-hostfxr-6.0 | 0 | 6.0.9-1.el8_6 |
| AlmaLinux:8 | dotnet-runtime-3.1 | 0 | 3.1.29-1.el8_6 |
| AlmaLinux:8 | dotnet-runtime-6.0 | 0 | 6.0.9-1.el8_6 |
| AlmaLinux:8 | dotnet-sdk-3.1 | 0 | 3.1.423-1.el8_6 |
| AlmaLinux:8 | dotnet-sdk-3.1-source-built-artifacts | 0 | 3.1.423-1.el8_6 |
| AlmaLinux:8 | dotnet-sdk-6.0 | 0 | 6.0.109-1.el8_6 |
| AlmaLinux:8 | dotnet-sdk-6.0-source-built-artifacts | 0 | 6.0.109-1.el8_6 |
| AlmaLinux:8 | dotnet-targeting-pack-3.1 | 0 | 3.1.29-1.el8_6 |
| AlmaLinux:8 | dotnet-targeting-pack-6.0 | 0 | 6.0.9-1.el8_6 |
| AlmaLinux:8 | dotnet-templates-3.1 | 0 | 3.1.423-1.el8_6 |
| AlmaLinux:8 | dotnet-templates-6.0 | 0 | 6.0.109-1.el8_6 |
| AlmaLinux:8 | netstandard-targeting-pack-2.1 | 0 | 6.0.109-1.el8_6 |
| AlmaLinux:9 | aspnetcore-runtime-6.0 | 0 | 6.0.9-1.el9_0 |
| AlmaLinux:9 | aspnetcore-targeting-pack-6.0 | 0 | 6.0.9-1.el9_0 |
| AlmaLinux:9 | dotnet-apphost-pack-6.0 | 0 | 6.0.9-1.el9_0 |
| AlmaLinux:9 | dotnet-host | 0 | 6.0.9-1.el9_0 |
| AlmaLinux:9 | dotnet-hostfxr-6.0 | 0 | 6.0.9-1.el9_0 |
| AlmaLinux:9 | dotnet-runtime-6.0 | 0 | 6.0.9-1.el9_0 |
| AlmaLinux:9 | dotnet-sdk-6.0 | 0 | 6.0.109-1.el9_0 |
| AlmaLinux:9 | dotnet-sdk-6.0-source-built-artifacts | 0 | 6.0.109-1.el9_0 |
| AlmaLinux:9 | dotnet-targeting-pack-6.0 | 0 | 6.0.9-1.el9_0 |
| AlmaLinux:9 | dotnet-templates-6.0 | 0 | 6.0.109-1.el9_0 |
| AlmaLinux:9 | netstandard-targeting-pack-2.1 | 0 | 6.0.109-1.el9_0 |
| Bitnami | dotnet | 6.0.0 | No fix |
| Bitnami | dotnet | 6.0.0 | 6.0.1 |
| Bitnami | dotnet-sdk | 6.0.0 | No fix |
| Bitnami | dotnet-sdk | 6.0.0 | 6.0.1 |
| Red Hat:enterprise_linux:8::appstream | aspnetcore-runtime-3.1 | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | aspnetcore-runtime-6.0 | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | aspnetcore-targeting-pack-3.1 | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | aspnetcore-targeting-pack-6.0 | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-apphost-pack-3.1 | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-apphost-pack-3.1-debuginfo | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-apphost-pack-6.0 | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-apphost-pack-6.0-debuginfo | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-host | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-host-debuginfo | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-hostfxr-3.1 | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-hostfxr-3.1-debuginfo | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-hostfxr-6.0 | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-hostfxr-6.0-debuginfo | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-runtime-3.1 | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-runtime-3.1-debuginfo | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-runtime-6.0 | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-runtime-6.0-debuginfo | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-sdk-3.1 | 0 | 0:3.1.423-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-sdk-3.1-debuginfo | 0 | 0:3.1.423-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-sdk-3.1-source-built-artifacts | 0 | 0:3.1.423-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-sdk-6.0 | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-sdk-6.0-debuginfo | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-sdk-6.0-source-built-artifacts | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-targeting-pack-3.1 | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-targeting-pack-6.0 | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-templates-3.1 | 0 | 0:3.1.423-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet-templates-6.0 | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet3.1 | 0 | 0:3.1.423-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet3.1-debuginfo | 0 | 0:3.1.423-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet3.1-debugsource | 0 | 0:3.1.423-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet6.0 | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet6.0-debuginfo | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | dotnet6.0-debugsource | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::appstream | netstandard-targeting-pack-2.1 | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | aspnetcore-runtime-3.1 | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | aspnetcore-runtime-6.0 | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | aspnetcore-targeting-pack-3.1 | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | aspnetcore-targeting-pack-6.0 | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-apphost-pack-3.1 | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-apphost-pack-3.1-debuginfo | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-apphost-pack-6.0 | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-apphost-pack-6.0-debuginfo | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-host | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-host-debuginfo | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-hostfxr-3.1 | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-hostfxr-3.1-debuginfo | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-hostfxr-6.0 | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-hostfxr-6.0-debuginfo | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-runtime-3.1 | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-runtime-3.1-debuginfo | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-runtime-6.0 | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-runtime-6.0-debuginfo | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-sdk-3.1 | 0 | 0:3.1.423-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-sdk-3.1-debuginfo | 0 | 0:3.1.423-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-sdk-3.1-source-built-artifacts | 0 | 0:3.1.423-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-sdk-6.0 | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-sdk-6.0-debuginfo | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-sdk-6.0-source-built-artifacts | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-targeting-pack-3.1 | 0 | 0:3.1.29-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-targeting-pack-6.0 | 0 | 0:6.0.9-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-templates-3.1 | 0 | 0:3.1.423-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet-templates-6.0 | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet3.1 | 0 | 0:3.1.423-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet3.1-debuginfo | 0 | 0:3.1.423-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet3.1-debugsource | 0 | 0:3.1.423-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet6.0 | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet6.0-debuginfo | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | dotnet6.0-debugsource | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:8::crb | netstandard-targeting-pack-2.1 | 0 | 0:6.0.109-1.el8_6 |
| Red Hat:enterprise_linux:9::appstream | aspnetcore-runtime-6.0 | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | aspnetcore-targeting-pack-6.0 | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet-apphost-pack-6.0 | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet-apphost-pack-6.0-debuginfo | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet-host | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet-host-debuginfo | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet-hostfxr-6.0 | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet-hostfxr-6.0-debuginfo | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet-runtime-6.0 | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet-runtime-6.0-debuginfo | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet-sdk-6.0 | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet-sdk-6.0-debuginfo | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet-sdk-6.0-source-built-artifacts | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet-targeting-pack-6.0 | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet-templates-6.0 | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet6.0 | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet6.0-debuginfo | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | dotnet6.0-debugsource | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::appstream | netstandard-targeting-pack-2.1 | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | aspnetcore-runtime-6.0 | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | aspnetcore-targeting-pack-6.0 | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet-apphost-pack-6.0 | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet-apphost-pack-6.0-debuginfo | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet-host | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet-host-debuginfo | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet-hostfxr-6.0 | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet-hostfxr-6.0-debuginfo | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet-runtime-6.0 | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet-runtime-6.0-debuginfo | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet-sdk-6.0 | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet-sdk-6.0-debuginfo | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet-sdk-6.0-source-built-artifacts | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet-targeting-pack-6.0 | 0 | 0:6.0.9-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet-templates-6.0 | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet6.0 | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet6.0-debuginfo | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | dotnet6.0-debugsource | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:enterprise_linux:9::crb | netstandard-targeting-pack-2.1 | 0 | 0:6.0.109-1.el9_0 |
| Red Hat:rhel_dotnet:3.1::el7 | rh-dotnet31-aspnetcore-runtime-3.1 | 0 | 0:3.1.29-1.el7_9 |
| Red Hat:rhel_dotnet:3.1::el7 | rh-dotnet31-aspnetcore-targeting-pack-3.1 | 0 | 0:3.1.29-1.el7_9 |
| Red Hat:rhel_dotnet:3.1::el7 | rh-dotnet31-dotnet | 0 | 0:3.1.423-1.el7_9 |
| Red Hat:rhel_dotnet:3.1::el7 | rh-dotnet31-dotnet-apphost-pack-3.1 | 0 | 0:3.1.29-1.el7_9 |
| Red Hat:rhel_dotnet:3.1::el7 | rh-dotnet31-dotnet-debuginfo | 0 | 0:3.1.423-1.el7_9 |
| Red Hat:rhel_dotnet:3.1::el7 | rh-dotnet31-dotnet-host | 0 | 0:3.1.29-1.el7_9 |
| Red Hat:rhel_dotnet:3.1::el7 | rh-dotnet31-dotnet-hostfxr-3.1 | 0 | 0:3.1.29-1.el7_9 |
| Red Hat:rhel_dotnet:3.1::el7 | rh-dotnet31-dotnet-runtime-3.1 | 0 | 0:3.1.29-1.el7_9 |
| Red Hat:rhel_dotnet:3.1::el7 | rh-dotnet31-dotnet-sdk-3.1 | 0 | 0:3.1.423-1.el7_9 |
| Red Hat:rhel_dotnet:3.1::el7 | rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts | 0 | 0:3.1.423-1.el7_9 |
| Red Hat:rhel_dotnet:3.1::el7 | rh-dotnet31-dotnet-targeting-pack-3.1 | 0 | 0:3.1.29-1.el7_9 |
| Red Hat:rhel_dotnet:3.1::el7 | rh-dotnet31-dotnet-templates-3.1 | 0 | 0:3.1.423-1.el7_9 |
| Red Hat:rhel_dotnet:3.1::el7 | rh-dotnet31-netstandard-targeting-pack-2.1 | 0 | 0:3.1.423-1.el7_9 |
| Red Hat:rhel_dotnet:6.0::el7 | rh-dotnet60-aspnetcore-runtime-6.0 | 0 | 0:6.0.9-1.el7_9 |
| Red Hat:rhel_dotnet:6.0::el7 | rh-dotnet60-aspnetcore-targeting-pack-6.0 | 0 | 0:6.0.9-1.el7_9 |
| Red Hat:rhel_dotnet:6.0::el7 | rh-dotnet60-dotnet | 0 | 0:6.0.109-1.el7_9 |
| Red Hat:rhel_dotnet:6.0::el7 | rh-dotnet60-dotnet-apphost-pack-6.0 | 0 | 0:6.0.9-1.el7_9 |
| Red Hat:rhel_dotnet:6.0::el7 | rh-dotnet60-dotnet-debuginfo | 0 | 0:6.0.109-1.el7_9 |
| Red Hat:rhel_dotnet:6.0::el7 | rh-dotnet60-dotnet-host | 0 | 0:6.0.9-1.el7_9 |
| Red Hat:rhel_dotnet:6.0::el7 | rh-dotnet60-dotnet-hostfxr-6.0 | 0 | 0:6.0.9-1.el7_9 |
| Red Hat:rhel_dotnet:6.0::el7 | rh-dotnet60-dotnet-runtime-6.0 | 0 | 0:6.0.9-1.el7_9 |
| Red Hat:rhel_dotnet:6.0::el7 | rh-dotnet60-dotnet-sdk-6.0 | 0 | 0:6.0.109-1.el7_9 |
| Red Hat:rhel_dotnet:6.0::el7 | rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts | 0 | 0:6.0.109-1.el7_9 |
| Red Hat:rhel_dotnet:6.0::el7 | rh-dotnet60-dotnet-targeting-pack-6.0 | 0 | 0:6.0.9-1.el7_9 |
| Red Hat:rhel_dotnet:6.0::el7 | rh-dotnet60-dotnet-templates-6.0 | 0 | 0:6.0.109-1.el7_9 |
| Red Hat:rhel_dotnet:6.0::el7 | rh-dotnet60-netstandard-targeting-pack-2.1 | 0 | 0:6.0.109-1.el7_9 |
| Rocky Linux:8 | dotnet3.1 | 0 | 0:3.1.423-1.el8_6 |
| Rocky Linux:8 | dotnet6.0 | 0 | 0:6.0.109-1.el8_6 |
| Ubuntu:22.04:LTS | dotnet6 | 0 | 6.0.109-0ubuntu1~22.04.1 |
| nuget | Microsoft.AspNetCore.App.Runtime.linux-arm | 3.1.0 | 3.1.29 |
| nuget | Microsoft.AspNetCore.App.Runtime.linux-arm | 5.0.0 | 6.0.9 |
| nuget | Microsoft.AspNetCore.App.Runtime.linux-arm64 | 3.1.0 | 3.1.29 |
Related vulnerabilities
- CVE-2025-55315 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability Also affects Microsoft.AspNetCore.App.Runtime.linux-arm
- CVE-2024-38229 Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability Also affects Microsoft.AspNetCore.App.Runtime.linux-arm
- CVE-2024-30046 Visual Studio Denial of Service Vulnerability Also affects Microsoft.AspNetCore.App.Runtime.linux-arm
- CVE-2023-38178 .NET Core and Visual Studio Denial of Service Vulnerability Also affects Microsoft.AspNetCore.App.Runtime.win-arm
- CVE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability Also affects Microsoft.AspNetCore.App.Runtime.win-arm64
- CVE-2022-41032 NuGet Client Elevation of Privilege Vulnerability Also affects aspnetcore-runtime-3.1
- CVE-2024-43483 Microsoft Security Advisory CVE-2024-43483 | .NET Denial of Service Vulnerability Also affects aspnetcore-runtime-6.0
- CVE-2024-43484 Microsoft Security Advisory CVE-2024-43484 | .NET Denial of Service Vulnerability Also affects aspnetcore-runtime-6.0