5

CVE-2022-24464

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ .Net Version >= 5.0 <= 5.0.14
Microsoft ≫ .Net Version >= 6.0.0 <= 6.0.2
Microsoft ≫ .Net Core Version >= 3.1 <= 3.1.22
Microsoft ≫ Visual Studio 2019 Version >= 16.0 <= 16.6.4
Microsoft ≫ Visual Studio 2019 Version >= 16.7.0 < 16.7.26
Microsoft ≫ Visual Studio 2019 Version >= 16.8.0 <= 16.8.7
Microsoft ≫ Visual Studio 2019 Version >= 16.9.0 < 16.9.18
Microsoft ≫ Visual Studio 2019 Version >= 16.10.0 <= 16.10.4
Microsoft ≫ Visual Studio 2019 Version >= 16.11.0 < 16.11.11
Microsoft ≫ Visual Studio 2022 Version >= 17.0 < 17.0.7
Fedoraproject ≫ Fedora Version 34
Fedoraproject ≫ Fedora Version 35
Fedoraproject ≫ Fedora Version 36
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.55% 0.881
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Microsoft 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24464
Patch
Vendor Advisory