Upstream information
CVE-2022-38013 at MITRE
Description
.NET Core and Visual Studio Denial of Service Vulnerability
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having important severity.
CVSS v3 Scores
|   |  National Vulnerability Database | 
| Base Score |  7.5 | 
| Vector |  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 
| Attack Vector |  Network | 
| Attack Complexity |  Low | 
| Privileges Required |  None | 
| User Interaction |  None | 
| Scope |  Unchanged | 
| Confidentiality Impact |  None | 
| Integrity Impact |  None | 
| Availability Impact |  High | 
| CVSSv3 Version |  3.1 | 
No SUSE Bugzilla entries cross referenced.
No SUSE Security Announcements cross referenced.
List of released packages
| Product(s) |  Fixed package version(s) |  References | 
| SUSE Liberty Linux 8 |  aspnetcore-runtime-3.1 >= 3.1.29-1.el8_6 
 aspnetcore-runtime-6.0 >= 6.0.9-1.el8_6 
 aspnetcore-targeting-pack-3.1 >= 3.1.29-1.el8_6 
 aspnetcore-targeting-pack-6.0 >= 6.0.9-1.el8_6 
 dotnet >= 6.0.109-1.el8_6 
 dotnet-apphost-pack-3.1 >= 3.1.29-1.el8_6 
 dotnet-apphost-pack-6.0 >= 6.0.9-1.el8_6 
 dotnet-host >= 6.0.9-1.el8_6 
 dotnet-hostfxr-3.1 >= 3.1.29-1.el8_6 
 dotnet-hostfxr-6.0 >= 6.0.9-1.el8_6 
 dotnet-runtime-3.1 >= 3.1.29-1.el8_6 
 dotnet-runtime-6.0 >= 6.0.9-1.el8_6 
 dotnet-sdk-3.1 >= 3.1.423-1.el8_6 
 dotnet-sdk-3.1-source-built-artifacts >= 3.1.423-1.el8_6 
 dotnet-sdk-6.0 >= 6.0.109-1.el8_6 
 dotnet-sdk-6.0-source-built-artifacts >= 6.0.109-1.el8_6 
 dotnet-targeting-pack-3.1 >= 3.1.29-1.el8_6 
 dotnet-targeting-pack-6.0 >= 6.0.9-1.el8_6 
 dotnet-templates-3.1 >= 3.1.423-1.el8_6 
 dotnet-templates-6.0 >= 6.0.109-1.el8_6 
 netstandard-targeting-pack-2.1 >= 6.0.109-1.el8_6 
  |  Patchnames:  RHSA-2022:6523 RHSA-2022:6539 | 
| SUSE Liberty Linux 9 |  aspnetcore-runtime-6.0 >= 6.0.9-1.el9_0 
 aspnetcore-targeting-pack-6.0 >= 6.0.9-1.el9_0 
 dotnet-apphost-pack-6.0 >= 6.0.9-1.el9_0 
 dotnet-host >= 6.0.9-1.el9_0 
 dotnet-hostfxr-6.0 >= 6.0.9-1.el9_0 
 dotnet-runtime-6.0 >= 6.0.9-1.el9_0 
 dotnet-sdk-6.0 >= 6.0.109-1.el9_0 
 dotnet-sdk-6.0-source-built-artifacts >= 6.0.109-1.el9_0 
 dotnet-targeting-pack-6.0 >= 6.0.9-1.el9_0 
 dotnet-templates-6.0 >= 6.0.109-1.el9_0 
 netstandard-targeting-pack-2.1 >= 6.0.109-1.el9_0 
  |  Patchnames:  RHSA-2022:6521 | 
SUSE Timeline for this CVE
CVE page created: Tue Sep 13 20:00:20 2022
CVE page last modified: Thu Dec 21 00:34:52 2023