Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-21722 (GCVE-0-2023-21722)
Vulnerability from cvelistv5 – Published: 2023-02-14 19:33 – Updated: 2025-01-01 00:41
VLAI
EPSS
Title
.NET Framework Denial of Service Vulnerability
Summary
.NET Framework Denial of Service Vulnerability
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisory |
Impacted products
11 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft .NET Framework 4.8 |
Affected:
4.8.0 , < 4.8.4614.08
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8 |
Affected:
4.8.0 , < 10.0.04614.06
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 AND 4.7.2 |
Affected:
4.7.0 , < 10.0.04038.03
(custom)
|
|
| Microsoft | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 |
Affected:
4.7.0 , < 4.7.04614.08
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8.1 |
Affected:
4.8.1 , < 10.0.09139.02
(custom)
|
|
| Microsoft | Microsoft .NET Framework 4.6.2 |
Affected:
4.7.0 , < 4.7.04038.06
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 and 4.6.2 |
Affected:
4.7.0 , < 10.0.10240.19747
(custom)
|
|
| Microsoft | Microsoft .NET Framework 2.0 Service Pack 2 |
Affected:
2.0.0 , < 2.0.50727.8966
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.0 Service Pack 2 |
Affected:
3.0.0 , < 2.0.50727.8966
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 |
Affected:
3.5.0 , < 3.5.50727.8966
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5.1 |
Affected:
3.5.0 , < 3.5.50727.8966
(custom)
|
Date Public
2023-02-14 08:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-21722",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-15T20:52:17.319350Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-15T20:52:25.380Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T09:51:49.434Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": ".NET Framework Denial of Service Vulnerability",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"platforms": [
"Windows Server 2008 R2 for x64-based Systems Service Pack 1",
"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 4.8",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.8.4614.08",
"status": "affected",
"version": "4.8.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1809 for 32-bit Systems",
"Windows 10 Version 1809 for x64-based Systems",
"Windows Server 2019",
"Windows Server 2019 (Server Core installation)",
"Windows Server 2022",
"Windows Server 2022 (Server Core installation)",
"Windows 10 Version 20H2 for 32-bit Systems",
"Windows 10 Version 20H2 for ARM64-based Systems",
"Windows 11 version 21H2 for x64-based Systems",
"Windows 11 version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for 32-bit Systems",
"Windows 10 Version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for x64-based Systems",
"Windows 10 Version 22H2 for x64-based Systems",
"Windows 10 Version 1607 for 32-bit Systems",
"Windows Server 2016 (Server Core installation)",
"Windows 10 Version 22H2 for 32-bit Systems",
"Windows 10 Version 22H2 for ARM64-based Systems",
"Windows 10 Version 1607 for x64-based Systems",
"Windows Server 2016"
],
"product": "Microsoft .NET Framework 3.5 AND 4.8",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.04614.06",
"status": "affected",
"version": "4.8.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1809 for 32-bit Systems",
"Windows 10 Version 1809 for x64-based Systems",
"Windows 10 Version 1809 for ARM64-based Systems",
"Windows Server 2019",
"Windows Server 2019 (Server Core installation)",
"Windows Server 2016",
"Windows 10 Version 1607 for x64-based Systems",
"Windows Server 2016 (Server Core installation)",
"Windows 10 Version 1607 for 32-bit Systems"
],
"product": "Microsoft .NET Framework 3.5 AND 4.7.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.04038.03",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2008 R2 for x64-based Systems Service Pack 1",
"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.7.04614.08",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2022",
"Windows Server 2022 (Server Core installation)",
"Windows 10 Version 20H2 for 32-bit Systems",
"Windows 10 Version 20H2 for ARM64-based Systems",
"Windows 11 version 21H2 for x64-based Systems",
"Windows 11 version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for 32-bit Systems",
"Windows 10 Version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for x64-based Systems",
"Windows 11 Version 22H2 for ARM64-based Systems",
"Windows 11 Version 22H2 for x64-based Systems",
"Windows 10 Version 22H2 for ARM64-based Systems",
"Windows 10 Version 22H2 for 32-bit Systems",
"Windows 10 Version 22H2 for x64-based Systems"
],
"product": "Microsoft .NET Framework 3.5 AND 4.8.1",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.09139.02",
"status": "affected",
"version": "4.8.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2008 for 32-bit Systems Service Pack 2",
"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
"Windows Server 2008 for x64-based Systems Service Pack 2",
"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 4.6.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.7.04038.06",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 for 32-bit Systems",
"Windows 10 for x64-based Systems"
],
"product": "Microsoft .NET Framework 3.5 and 4.6.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.10240.19747",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2008 for 32-bit Systems Service Pack 2",
"Windows Server 2008 for x64-based Systems Service Pack 2"
],
"product": "Microsoft .NET Framework 2.0 Service Pack 2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.0.50727.8966",
"status": "affected",
"version": "2.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2008 for 32-bit Systems Service Pack 2",
"Windows Server 2008 for x64-based Systems Service Pack 2"
],
"product": "Microsoft .NET Framework 3.0 Service Pack 2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.0.50727.8966",
"status": "affected",
"version": "3.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "3.5.50727.8966",
"status": "affected",
"version": "3.5.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2008 R2 for x64-based Systems Service Pack 1",
"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5.1",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "3.5.50727.8966",
"status": "affected",
"version": "3.5.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.8.4614.08",
"versionStartIncluding": "4.8.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.04614.06",
"versionStartIncluding": "4.8.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.04038.03",
"versionStartIncluding": "4.7.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.7.04614.08",
"versionStartIncluding": "4.7.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.09139.02",
"versionStartIncluding": "4.8.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.7.04038.06",
"versionStartIncluding": "4.7.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.10240.19747",
"versionStartIncluding": "4.7.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
"versionEndExcluding": "2.0.50727.8966",
"versionStartIncluding": "2.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
"versionEndExcluding": "2.0.50727.8966",
"versionStartIncluding": "3.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.5.50727.8966",
"versionStartIncluding": "3.5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.5.50727.8966",
"versionStartIncluding": "3.5.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2023-02-14T08:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": ".NET Framework Denial of Service Vulnerability"
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-01T00:41:19.847Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": ".NET Framework Denial of Service Vulnerability",
"tags": [
"vendor-advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722"
}
],
"title": ".NET Framework Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2023-21722",
"datePublished": "2023-02-14T19:33:47.590Z",
"dateReserved": "2022-12-13T18:08:03.493Z",
"dateUpdated": "2025-01-01T00:41:19.847Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2023-21722",
"date": "2026-06-20",
"epss": "0.00917",
"percentile": "0.55487"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2023-21722\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2023-02-14T20:15:14.773\",\"lastModified\":\"2024-11-21T07:43:30.603\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\".NET Framework Denial of Service Vulnerability\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H\",\"baseScore\":5.0,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.3,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H\",\"baseScore\":5.0,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.3,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-59\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E039CE1F-B988-4741-AE2E-5B36E2AF9688\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"5E491E46-1917-41FE-8F9A-BB0BDDEB42C3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"0A1BC97A-263E-4291-8AEF-02EE4E6031E9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"306B7CE6-8239-4AED-9ED4-4C9F5B349F58\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"345FCD64-D37B-425B-B64C-8B1640B7E850\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB79EE26-FC32-417D-A49C-A1A63165A968\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E039CE1F-B988-4741-AE2E-5B36E2AF9688\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D3F18AF-84ED-473B-A8DF-65EB23C475AF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4A637D6-78D0-400D-82A4-FDEFCED069B1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"4C3391B0-C6A6-4F6F-AC1B-AD0927C2C986\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"112871CE-B37B-454E-AC10-A285D92CCE0E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"E461193F-C65C-47D7-89B6-F1C68877E3CC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"37833862-8FE6-4007-84F1-88ACF5242F12\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"7B844383-85F5-41FA-AE73-C6C6F80734E1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"3C3151EE-B690-4412-9520-5A0EDC0E91F4\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"758EC2EA-ED6B-490D-A4E5-FC26AC7A0753\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F7487B8-BE4D-4707-9E20-39840A260831\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"E3D0CEE5-45D9-4710-B170-A33A8D0D55CF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"39F5DAC9-ED40-4870-AA86-941B0E675728\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB79EE26-FC32-417D-A49C-A1A63165A968\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"821614DD-37DD-44E2-A8A4-FE8D23A33C3C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E039CE1F-B988-4741-AE2E-5B36E2AF9688\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"934D4E46-12C1-41DC-A28C-A2C430E965E4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99895822-BFAB-4CB1-8C70-41F0F714B31F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"979081E3-FB60-43E0-BF86-ED301E7EF25C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F7487B8-BE4D-4707-9E20-39840A260831\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"E3D0CEE5-45D9-4710-B170-A33A8D0D55CF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"39F5DAC9-ED40-4870-AA86-941B0E675728\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"216BE28A-ABCD-44B5-9689-770B9A62BD35\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"76AB4B84-CF32-4F18-8AC7-D41EDD3792B1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"821614DD-37DD-44E2-A8A4-FE8D23A33C3C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E039CE1F-B988-4741-AE2E-5B36E2AF9688\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8EDC4407-7E92-4E60-82F0-0C87D1860D3A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D400E856-2B2E-4CEA-8CA5-309FDF371CEA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F422A8C-2C4E-42C8-B420-E0728037E15C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"42A6DF09-B8E1-414D-97E7-453566055279\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F422A8C-2C4E-42C8-B420-E0728037E15C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E039CE1F-B988-4741-AE2E-5B36E2AF9688\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BBAB8E45-4E6E-4ABD-A5DD-3F72DB4A7AE6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1511:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E43B1A3-8DAF-4FB5-9549-190E1F2AD9E6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4A637D6-78D0-400D-82A4-FDEFCED069B1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1703:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17A026A3-F59C-48F5-9834-5FB054642136\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1709:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"180EBE38-18CF-4298-8F9B-9457A31E2FF3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"102319F6-1C4B-4359-8FFD-D104FF5B1C51\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E2A7014-8078-4C40-91E3-ACA60A98AC68\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1903:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5315F244-C80B-48E0-AEA3-53D82F70C892\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F506E8F-4792-49DA-9510-460D97C582ED\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_2004:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DBFB431A-F9B7-47C3-B26E-910127D3BBB7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99895822-BFAB-4CB1-8C70-41F0F714B31F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E37CC1E-4DA1-4A05-AF64-00381E6ECCE2\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"979081E3-FB60-43E0-BF86-ED301E7EF25C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F7487B8-BE4D-4707-9E20-39840A260831\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F422A8C-2C4E-42C8-B420-E0728037E15C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"734112B3-1383-4BE3-8721-C0F84566B764\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36B0E40A-84EF-4099-A395-75D6B8CDA196\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D3F18AF-84ED-473B-A8DF-65EB23C475AF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722\", \"name\": \".NET Framework Denial of Service Vulnerability\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T09:51:49.434Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-21722\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-07-15T20:52:17.319350Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-07-15T20:52:22.791Z\"}}], \"cna\": {\"title\": \".NET Framework Denial of Service Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 5, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 4.8\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.8.0\", \"lessThan\": \"4.8.4614.08\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows Server 2008 R2 for x64-based Systems Service Pack 1\", \"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)\", \"Windows Server 2012\", \"Windows Server 2012 (Server Core installation)\", \"Windows Server 2012 R2\", \"Windows Server 2012 R2 (Server Core installation)\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.5 AND 4.8\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.8.0\", \"lessThan\": \"10.0.04614.06\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows 10 Version 1809 for 32-bit Systems\", \"Windows 10 Version 1809 for x64-based Systems\", \"Windows Server 2019\", \"Windows Server 2019 (Server Core installation)\", \"Windows Server 2022\", \"Windows Server 2022 (Server Core installation)\", \"Windows 10 Version 20H2 for 32-bit Systems\", \"Windows 10 Version 20H2 for ARM64-based Systems\", \"Windows 11 version 21H2 for x64-based Systems\", \"Windows 11 version 21H2 for ARM64-based Systems\", \"Windows 10 Version 21H2 for 32-bit Systems\", \"Windows 10 Version 21H2 for ARM64-based Systems\", \"Windows 10 Version 21H2 for x64-based Systems\", \"Windows 10 Version 22H2 for x64-based Systems\", \"Windows 10 Version 1607 for 32-bit Systems\", \"Windows Server 2016 (Server Core installation)\", \"Windows 10 Version 22H2 for 32-bit Systems\", \"Windows 10 Version 22H2 for ARM64-based Systems\", \"Windows 10 Version 1607 for x64-based Systems\", \"Windows Server 2016\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.5 AND 4.7.2\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.7.0\", \"lessThan\": \"10.0.04038.03\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows 10 Version 1809 for 32-bit Systems\", \"Windows 10 Version 1809 for x64-based Systems\", \"Windows 10 Version 1809 for ARM64-based Systems\", \"Windows Server 2019\", \"Windows Server 2019 (Server Core installation)\", \"Windows Server 2016\", \"Windows 10 Version 1607 for x64-based Systems\", \"Windows Server 2016 (Server Core installation)\", \"Windows 10 Version 1607 for 32-bit Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.7.0\", \"lessThan\": \"4.7.04614.08\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows Server 2008 R2 for x64-based Systems Service Pack 1\", \"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)\", \"Windows Server 2012\", \"Windows Server 2012 (Server Core installation)\", \"Windows Server 2012 R2\", \"Windows Server 2012 R2 (Server Core installation)\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.5 AND 4.8.1\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.8.1\", \"lessThan\": \"10.0.09139.02\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows Server 2022\", \"Windows Server 2022 (Server Core installation)\", \"Windows 10 Version 20H2 for 32-bit Systems\", \"Windows 10 Version 20H2 for ARM64-based Systems\", \"Windows 11 version 21H2 for x64-based Systems\", \"Windows 11 version 21H2 for ARM64-based Systems\", \"Windows 10 Version 21H2 for 32-bit Systems\", \"Windows 10 Version 21H2 for ARM64-based Systems\", \"Windows 10 Version 21H2 for x64-based Systems\", \"Windows 11 Version 22H2 for ARM64-based Systems\", \"Windows 11 Version 22H2 for x64-based Systems\", \"Windows 10 Version 22H2 for ARM64-based Systems\", \"Windows 10 Version 22H2 for 32-bit Systems\", \"Windows 10 Version 22H2 for x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 4.6.2\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.7.0\", \"lessThan\": \"4.7.04038.06\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows Server 2008 for 32-bit Systems Service Pack 2\", \"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)\", \"Windows Server 2008 for x64-based Systems Service Pack 2\", \"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.5 and 4.6.2\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.7.0\", \"lessThan\": \"10.0.10240.19747\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows 10 for 32-bit Systems\", \"Windows 10 for x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 2.0 Service Pack 2\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.0.0\", \"lessThan\": \"2.0.50727.8966\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows Server 2008 for 32-bit Systems Service Pack 2\", \"Windows Server 2008 for x64-based Systems Service Pack 2\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.0 Service Pack 2\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.0.0\", \"lessThan\": \"2.0.50727.8966\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows Server 2008 for 32-bit Systems Service Pack 2\", \"Windows Server 2008 for x64-based Systems Service Pack 2\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.5\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.5.0\", \"lessThan\": \"3.5.50727.8966\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows Server 2012\", \"Windows Server 2012 (Server Core installation)\", \"Windows Server 2012 R2\", \"Windows Server 2012 R2 (Server Core installation)\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.5.1\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.5.0\", \"lessThan\": \"3.5.50727.8966\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows Server 2008 R2 for x64-based Systems Service Pack 1\", \"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)\"]}], \"datePublic\": \"2023-02-14T08:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722\", \"name\": \".NET Framework Denial of Service Vulnerability\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \".NET Framework Denial of Service Vulnerability\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-59\", \"description\": \"CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.8.4614.08\", \"versionStartIncluding\": \"4.8.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.04614.06\", \"versionStartIncluding\": \"4.8.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.04038.03\", \"versionStartIncluding\": \"4.7.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.7.04614.08\", \"versionStartIncluding\": \"4.7.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.09139.02\", \"versionStartIncluding\": \"4.8.1\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.7.04038.06\", \"versionStartIncluding\": \"4.7.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.10240.19747\", \"versionStartIncluding\": \"4.7.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"2.0.50727.8966\", \"versionStartIncluding\": \"2.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"2.0.50727.8966\", \"versionStartIncluding\": \"3.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"3.5.50727.8966\", \"versionStartIncluding\": \"3.5.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"3.5.50727.8966\", \"versionStartIncluding\": \"3.5.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2025-01-01T00:41:19.847Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2023-21722\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-01-01T00:41:19.847Z\", \"dateReserved\": \"2022-12-13T18:08:03.493Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2023-02-14T19:33:47.590Z\", \"assignerShortName\": \"microsoft\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
Title
Уязвимость программной платформы Microsoft .NET Framework, связанная c некорректной зачисткой или освобождением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Description
Уязвимость программной платформы Microsoft .NET Framework связана c некорректной зачисткой или освобождением ресурсов. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании
Severity
Vendor
Microsoft Corp
Software Name
Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.7, Microsoft .NET Framework 4.6.2, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.7.2, Microsoft .NET Framework 4.8, Microsoft .NET Framework 4.8.1, Microsoft .NET Framework 2.0 Service Pack 2, Microsoft .NET Framework 3.0 Service Pack 2
Software Version
- (Microsoft .NET Framework 3.5), - (Microsoft .NET Framework 3.5.1), - (Microsoft .NET Framework 4.7), - (Microsoft .NET Framework 4.6.2), - (Microsoft .NET Framework 4.7.1), - (Microsoft .NET Framework 4.7.2), - (Microsoft .NET Framework 4.8), - (Microsoft .NET Framework 4.8.1), - (Microsoft .NET Framework 2.0 Service Pack 2), - (Microsoft .NET Framework 3.0 Service Pack 2)
Possible Mitigations
Использование рекомендаций:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722
Reference
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722
https://vuldb.com/ru/?id.220997
https://nvd.nist.gov/vuln/detail/CVE-2023-21722
CWE
CWE-404
{
"CVSS 2.0": "AV:L/AC:H/Au:S/C:N/I:N/A:C",
"CVSS 3.0": "AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "TO145, TO146, TO156, TO157",
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": "TO145 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 .NET Framework 3.5 \u0438 4.7.2 \u0434\u043b\u044f Windows 10 1809 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5022511), TO146 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 .NET Framework 3.5 \u0438 4.8 \u0434\u043b\u044f Windows 10 1809 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5022504), TO156 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 .NET Framework 3.5 \u0438 4.7.2 \u0434\u043b\u044f Windows 10 1809 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5022511), TO157 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 .NET Framework 3.5 \u0438 4.8 \u0434\u043b\u044f Windows 10 1809 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5022504)",
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Microsoft .NET Framework 3.5), - (Microsoft .NET Framework 3.5.1), - (Microsoft .NET Framework 4.7), - (Microsoft .NET Framework 4.6.2), - (Microsoft .NET Framework 4.7.1), - (Microsoft .NET Framework 4.7.2), - (Microsoft .NET Framework 4.8), - (Microsoft .NET Framework 4.8.1), - (Microsoft .NET Framework 2.0 Service Pack 2), - (Microsoft .NET Framework 3.0 Service Pack 2)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.02.2023",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "27.02.2023",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "27.02.2023",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2023-00859",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-21722",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.7, Microsoft .NET Framework 4.6.2, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.7.2, Microsoft .NET Framework 4.8, Microsoft .NET Framework 4.8.1, Microsoft .NET Framework 2.0 Service Pack 2, Microsoft .NET Framework 3.0 Service Pack 2",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Microsoft Corp Windows Server 2008 Service Pack 2 - 32-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - 64-bit, Microsoft Corp Windows Server 2012 - , Microsoft Corp Windows Server 2012 R2 - , Microsoft Corp Windows Server 2008 R2 Service Pack 1 - 64-bit, Microsoft Corp Windows 10 - 64-bit, Microsoft Corp Windows 10 - 32-bit, Microsoft Corp Windows 10 1607 - 64-bit, Microsoft Corp Windows 10 1607 - 32-bit, Microsoft Corp Windows Server 2016 - , Microsoft Corp Windows Server 2008 Service Pack 2 (Server Core Installation) - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 (Server Core Installation) - 32-bit, Microsoft Corp Windows Server 2012 R2 (Server Core installation) - , Microsoft Corp Windows Server 2016 (Server Core installation) - , Microsoft Corp Windows Server 2008 R2 Service Pack 1 (Server Core installation) - 64-bit, Microsoft Corp Windows 10 1809 - 64-bit, Microsoft Corp Windows 10 1809 - 32-bit, Microsoft Corp Windows Server 2019 - , Microsoft Corp Windows Server 2019 (Server Core installation) - , Microsoft Corp Windows 10 1809 - ARM64, Microsoft Corp Windows 10 20H2 - ARM64, Microsoft Corp Windows 10 20H2 - 32-bit, Microsoft Corp Windows 10 20H2 - 64-bit, Microsoft Corp Windows Server 2022 - , Microsoft Corp Windows Server 2022 (Server Core installation) - , Microsoft Corp Windows 10 21H2 - 64-bit, Microsoft Corp Windows 10 21H2 - 32-bit, Microsoft Corp Windows 10 21H2 - ARM64, Microsoft Corp Windows 11 22H2 - 64-bit, Microsoft Corp Windows 11 22H2 - ARM64, Microsoft Corp Windows 10 22H2 - 64-bit, Microsoft Corp Windows 10 22H2 - ARM64, Microsoft Corp Windows 10 22H2 - 32-bit, Microsoft Corp Windows 11 21H2 - 64-bit, Microsoft Corp Windows 11 21H2 - ARM64, Microsoft Corp Windows Server 2012 (Server Core installation) - ",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Microsoft .NET Framework, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0437\u0430\u0447\u0438\u0441\u0442\u043a\u043e\u0439 \u0438\u043b\u0438 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u0437\u0430\u0447\u0438\u0441\u0442\u043a\u0430 \u0438\u043b\u0438 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 (CWE-404)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Microsoft .NET Framework \u0441\u0432\u044f\u0437\u0430\u043d\u0430 c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0437\u0430\u0447\u0438\u0441\u0442\u043a\u043e\u0439 \u0438\u043b\u0438 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722\nhttps://vuldb.com/ru/?id.220997\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-21722",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-404",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 3,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,4)"
}
CERTFR-2023-AVI-0131
Vulnerability from certfr_avis - Published: 2023-02-15 - Updated: 2023-02-15
De multiples vulnérabilités ont été corrigées dans Microsoft .Net. Elles permettent à un attaquant de provoquer un déni de service et une exécution de code à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Microsoft .NET Framework 4.8 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.0 Service Pack 2 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 | ||
| Microsoft | N/A | Microsoft .NET Framework 4.6.2 | ||
| Microsoft | N/A | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 AND 4.8 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 AND 4.7.2 | ||
| Microsoft | N/A | .NET 7.0 | ||
| Microsoft | N/A | Microsoft .NET Framework 2.0 Service Pack 2 | ||
| Microsoft | N/A | .NET 6.0 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 AND 4.8.1 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5.1 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 and 4.6.2 |
References
| Title | Publication Time | Tags | |
|---|---|---|---|
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft .NET Framework 4.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.0 Service Pack 2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 4.6.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 AND 4.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 AND 4.7.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 7.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 2.0 Service Pack 2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 6.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 AND 4.8.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 and 4.6.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-21722",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21722"
},
{
"name": "CVE-2023-21808",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21808"
}
],
"initial_release_date": "2023-02-15T00:00:00",
"last_revision_date": "2023-02-15T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-21808 du 14 f\u00e9vrier 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21808"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2023-21722 du 14 f\u00e9vrier 2023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722"
}
],
"reference": "CERTFR-2023-AVI-0131",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-02-15T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft .Net\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service et une ex\u00e9cution de code \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft .Net",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 14 f\u00e9vrier 2023",
"url": "https://msrc.microsoft.com/update-guide/"
}
]
}
CERTFR-2024-AVI-0151
Vulnerability from certfr_avis - Published: 2024-02-21 - Updated: 2025-01-28
De multiples vulnérabilités ont été découvertes dans Joomla!. Elles permettent à un attaquant de provoquer un contournement de la politique de sécurité et une injection de code indirecte à distance (XSS).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Joomla! CMS versions 5.x ant\u00e9rieures \u00e0 5.0.3",
"product": {
"name": "Joomla!",
"vendor": {
"name": "Joomla!",
"scada": false
}
}
},
{
"description": "Joomla! CMS versions 4.x ant\u00e9rieures \u00e0 4.4.3",
"product": {
"name": "Joomla!",
"vendor": {
"name": "Joomla!",
"scada": false
}
}
},
{
"description": "Joomla! CMS versions ant\u00e9rieures \u00e0 3.10.15-elts",
"product": {
"name": "Joomla!",
"vendor": {
"name": "Joomla!",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2024-21725",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21725"
},
{
"name": "CVE-2023-21724",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21724"
},
{
"name": "CVE-2023-21726",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21726"
},
{
"name": "CVE-2023-21722",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21722"
},
{
"name": "CVE-2023-21725",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21725"
},
{
"name": "CVE-2023-21723",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21723"
}
],
"initial_release_date": "2024-02-21T00:00:00",
"last_revision_date": "2025-01-28T00:00:00",
"links": [],
"reference": "CERTFR-2024-AVI-0151",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-02-21T00:00:00.000000"
},
{
"description": "Ajout de l\u0027identifiant CVE-2024-21725",
"revision_date": "2025-01-28T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Joomla!. Elles\npermettent \u00e0 un attaquant de provoquer un contournement de la politique\nde s\u00e9curit\u00e9 et une injection de code indirecte \u00e0 distance (XSS).\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Joomla!",
"vendor_advisories": [
{
"published_at": "2024-02-20",
"title": "Bulletin de s\u00e9curit\u00e9 Joomla! 20240202",
"url": "https://developer.joomla.org/security-centre/926-20240202-core-open-redirect-in-installation-application.html"
},
{
"published_at": "2024-02-20",
"title": "Bulletin de s\u00e9curit\u00e9 Joomla! 20240203",
"url": "https://developer.joomla.org/security-centre/927-20240203-core-xss-in-media-selection-fields.html"
},
{
"published_at": "2024-02-20",
"title": "Bulletin de s\u00e9curit\u00e9 Joomla! 20240204",
"url": "https://developer.joomla.org/security-centre/928-20240204-core-xss-in-mail-address-outputs.html"
},
{
"published_at": "2024-02-20",
"title": "Bulletin de s\u00e9curit\u00e9 Joomla!",
"url": "https://www.joomla.org/announcements/release-news/5904-joomla-5-0-3-and-4-4-3-security-and-bug-fix-release.html"
},
{
"published_at": "2024-02-20",
"title": "Bulletin de s\u00e9curit\u00e9 Joomla! 20240201",
"url": "https://developer.joomla.org/security-centre/925-20240201-core-insufficient-session-expiration-in-mfa-management-views.html"
},
{
"published_at": "2024-02-20",
"title": "Bulletin de s\u00e9curit\u00e9 Joomla! 20240205",
"url": "https://developer.joomla.org/security-centre/929-20240205-core-inadequate-content-filtering-within-the-filter-code.html"
}
]
}
FKIE_CVE-2023-21722
Vulnerability from fkie_nvd - Published: 2023-02-14 20:15 - Updated: 2026-06-17 05:33
Severity
5.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
5.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
5.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Summary
.NET Framework Denial of Service Vulnerability
References
| URL | Tags | ||
|---|---|---|---|
| secure@microsoft.com | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722 | Patch, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722 | Patch, Vendor Advisory |
Impacted products
{
"affected": [
{
"affectedData": [
{
"platforms": [
"Windows Server 2008 R2 for x64-based Systems Service Pack 1",
"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 4.8",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.8.4614.08",
"status": "affected",
"version": "4.8.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1809 for 32-bit Systems",
"Windows 10 Version 1809 for x64-based Systems",
"Windows Server 2019",
"Windows Server 2019 (Server Core installation)",
"Windows Server 2022",
"Windows Server 2022 (Server Core installation)",
"Windows 10 Version 20H2 for 32-bit Systems",
"Windows 10 Version 20H2 for ARM64-based Systems",
"Windows 11 version 21H2 for x64-based Systems",
"Windows 11 version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for 32-bit Systems",
"Windows 10 Version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for x64-based Systems",
"Windows 10 Version 22H2 for x64-based Systems",
"Windows 10 Version 1607 for 32-bit Systems",
"Windows Server 2016 (Server Core installation)",
"Windows 10 Version 22H2 for 32-bit Systems",
"Windows 10 Version 22H2 for ARM64-based Systems",
"Windows 10 Version 1607 for x64-based Systems",
"Windows Server 2016"
],
"product": "Microsoft .NET Framework 3.5 AND 4.8",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.04614.06",
"status": "affected",
"version": "4.8.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1809 for 32-bit Systems",
"Windows 10 Version 1809 for x64-based Systems",
"Windows 10 Version 1809 for ARM64-based Systems",
"Windows Server 2019",
"Windows Server 2019 (Server Core installation)",
"Windows Server 2016",
"Windows 10 Version 1607 for x64-based Systems",
"Windows Server 2016 (Server Core installation)",
"Windows 10 Version 1607 for 32-bit Systems"
],
"product": "Microsoft .NET Framework 3.5 AND 4.7.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.04038.03",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2008 R2 for x64-based Systems Service Pack 1",
"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.7.04614.08",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2022",
"Windows Server 2022 (Server Core installation)",
"Windows 10 Version 20H2 for 32-bit Systems",
"Windows 10 Version 20H2 for ARM64-based Systems",
"Windows 11 version 21H2 for x64-based Systems",
"Windows 11 version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for 32-bit Systems",
"Windows 10 Version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for x64-based Systems",
"Windows 11 Version 22H2 for ARM64-based Systems",
"Windows 11 Version 22H2 for x64-based Systems",
"Windows 10 Version 22H2 for ARM64-based Systems",
"Windows 10 Version 22H2 for 32-bit Systems",
"Windows 10 Version 22H2 for x64-based Systems"
],
"product": "Microsoft .NET Framework 3.5 AND 4.8.1",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.09139.02",
"status": "affected",
"version": "4.8.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2008 for 32-bit Systems Service Pack 2",
"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
"Windows Server 2008 for x64-based Systems Service Pack 2",
"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 4.6.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.7.04038.06",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 for 32-bit Systems",
"Windows 10 for x64-based Systems"
],
"product": "Microsoft .NET Framework 3.5 and 4.6.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.10240.19747",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2008 for 32-bit Systems Service Pack 2",
"Windows Server 2008 for x64-based Systems Service Pack 2"
],
"product": "Microsoft .NET Framework 2.0 Service Pack 2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.0.50727.8966",
"status": "affected",
"version": "2.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2008 for 32-bit Systems Service Pack 2",
"Windows Server 2008 for x64-based Systems Service Pack 2"
],
"product": "Microsoft .NET Framework 3.0 Service Pack 2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "2.0.50727.8966",
"status": "affected",
"version": "3.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "3.5.50727.8966",
"status": "affected",
"version": "3.5.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2008 R2 for x64-based Systems Service Pack 1",
"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5.1",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "3.5.50727.8966",
"status": "affected",
"version": "3.5.0",
"versionType": "custom"
}
]
}
],
"source": "secure@microsoft.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "E039CE1F-B988-4741-AE2E-5B36E2AF9688",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
"matchCriteriaId": "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
"matchCriteriaId": "0A1BC97A-263E-4291-8AEF-02EE4E6031E9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
"matchCriteriaId": "306B7CE6-8239-4AED-9ED4-4C9F5B349F58",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
"matchCriteriaId": "345FCD64-D37B-425B-B64C-8B1640B7E850",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "E039CE1F-B988-4741-AE2E-5B36E2AF9688",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
"matchCriteriaId": "2D3F18AF-84ED-473B-A8DF-65EB23C475AF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B4A637D6-78D0-400D-82A4-FDEFCED069B1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "4C3391B0-C6A6-4F6F-AC1B-AD0927C2C986",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
"matchCriteriaId": "112871CE-B37B-454E-AC10-A285D92CCE0E",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "E461193F-C65C-47D7-89B6-F1C68877E3CC",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
"matchCriteriaId": "37833862-8FE6-4007-84F1-88ACF5242F12",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
"matchCriteriaId": "7B844383-85F5-41FA-AE73-C6C6F80734E1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "3C3151EE-B690-4412-9520-5A0EDC0E91F4",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
"matchCriteriaId": "758EC2EA-ED6B-490D-A4E5-FC26AC7A0753",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7F7487B8-BE4D-4707-9E20-39840A260831",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
"matchCriteriaId": "E3D0CEE5-45D9-4710-B170-A33A8D0D55CF",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "39F5DAC9-ED40-4870-AA86-941B0E675728",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
"matchCriteriaId": "821614DD-37DD-44E2-A8A4-FE8D23A33C3C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "E039CE1F-B988-4741-AE2E-5B36E2AF9688",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "934D4E46-12C1-41DC-A28C-A2C430E965E4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "99895822-BFAB-4CB1-8C70-41F0F714B31F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "979081E3-FB60-43E0-BF86-ED301E7EF25C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7F7487B8-BE4D-4707-9E20-39840A260831",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
"matchCriteriaId": "E3D0CEE5-45D9-4710-B170-A33A8D0D55CF",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "39F5DAC9-ED40-4870-AA86-941B0E675728",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
"matchCriteriaId": "216BE28A-ABCD-44B5-9689-770B9A62BD35",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "76AB4B84-CF32-4F18-8AC7-D41EDD3792B1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
"matchCriteriaId": "821614DD-37DD-44E2-A8A4-FE8D23A33C3C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "E039CE1F-B988-4741-AE2E-5B36E2AF9688",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8EDC4407-7E92-4E60-82F0-0C87D1860D3A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*",
"matchCriteriaId": "D400E856-2B2E-4CEA-8CA5-309FDF371CEA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
"matchCriteriaId": "42A6DF09-B8E1-414D-97E7-453566055279",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "E039CE1F-B988-4741-AE2E-5B36E2AF9688",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BBAB8E45-4E6E-4ABD-A5DD-3F72DB4A7AE6",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1511:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7E43B1A3-8DAF-4FB5-9549-190E1F2AD9E6",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B4A637D6-78D0-400D-82A4-FDEFCED069B1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1703:*:*:*:*:*:*:*:*",
"matchCriteriaId": "17A026A3-F59C-48F5-9834-5FB054642136",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1709:*:*:*:*:*:*:*:*",
"matchCriteriaId": "180EBE38-18CF-4298-8F9B-9457A31E2FF3",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:*:*",
"matchCriteriaId": "102319F6-1C4B-4359-8FFD-D104FF5B1C51",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0E2A7014-8078-4C40-91E3-ACA60A98AC68",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1903:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5315F244-C80B-48E0-AEA3-53D82F70C892",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8F506E8F-4792-49DA-9510-460D97C582ED",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_2004:*:*:*:*:*:*:*:*",
"matchCriteriaId": "DBFB431A-F9B7-47C3-B26E-910127D3BBB7",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "99895822-BFAB-4CB1-8C70-41F0F714B31F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5E37CC1E-4DA1-4A05-AF64-00381E6ECCE2",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "979081E3-FB60-43E0-BF86-ED301E7EF25C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7F7487B8-BE4D-4707-9E20-39840A260831",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"matchCriteriaId": "734112B3-1383-4BE3-8721-C0F84566B764",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "36B0E40A-84EF-4099-A395-75D6B8CDA196",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
"matchCriteriaId": "2D3F18AF-84ED-473B-A8DF-65EB23C475AF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": ".NET Framework Denial of Service Vulnerability"
}
],
"id": "CVE-2023-21722",
"lastModified": "2026-06-17T05:33:47.647",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.3,
"impactScore": 3.6,
"source": "secure@microsoft.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.3,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-21722",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-15T20:52:17.319350Z",
"version": "2.0.3"
}
}
]
},
"published": "2023-02-14T20:15:14.773",
"references": [
{
"source": "secure@microsoft.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-59"
}
],
"source": "secure@microsoft.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-XP67-PJ6P-RPVG
Vulnerability from github – Published: 2023-02-14 21:30 – Updated: 2023-02-14 21:30
VLAI
Details
.NET Framework Denial of Service Vulnerability
Severity
4.4 (Medium)
{
"affected": [],
"aliases": [
"CVE-2023-21722"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-02-14T20:15:00Z",
"severity": "MODERATE"
},
"details": ".NET Framework Denial of Service Vulnerability",
"id": "GHSA-xp67-pj6p-rpvg",
"modified": "2023-02-14T21:30:29Z",
"published": "2023-02-14T21:30:29Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-21722"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2023-21722
Vulnerability from gsd - Updated: 2023-12-13 01:20Details
.NET Framework Denial of Service Vulnerability
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2023-21722",
"id": "GSD-2023-21722"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2023-21722"
],
"details": ".NET Framework Denial of Service Vulnerability",
"id": "GSD-2023-21722",
"modified": "2023-12-13T01:20:25.346588Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secure@microsoft.com",
"ID": "CVE-2023-21722",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Microsoft .NET Framework 4.8",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "4.8.0",
"version_value": "4.8.4614.08"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5 AND 4.8",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "4.8.0",
"version_value": "10.0.04614.06"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5 AND 4.7.2",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "4.7.0",
"version_value": "10.0.04038.03"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "4.7.0",
"version_value": "4.7.04614.08"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5 AND 4.8.1",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "4.8.1",
"version_value": "10.0.09139.02"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.6.2",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "4.7.0",
"version_value": "4.7.04038.06"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5 and 4.6.2",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "4.7.0",
"version_value": "10.0.10240.19747"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 2.0 Service Pack 2",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "2.0.0",
"version_value": "2.0.50727.8966"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.0 Service Pack 2",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "3.0.0",
"version_value": "2.0.50727.8966"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "3.5.0",
"version_value": "3.5.50727.8966"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5.1",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "3.5.0",
"version_value": "3.5.50727.8966"
}
]
}
}
]
},
"vendor_name": "Microsoft"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": ".NET Framework Denial of Service Vulnerability"
}
]
},
"impact": {
"cvss": [
{
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Denial of Service"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722",
"refsource": "MISC",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1511:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1703:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1709:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1903:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_2004:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secure@microsoft.com",
"ID": "CVE-2023-21722"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": ".NET Framework Denial of Service Vulnerability"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722",
"refsource": "MISC",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722"
}
]
}
},
"impact": {
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.3,
"impactScore": 3.6
}
},
"lastModifiedDate": "2023-10-15T16:18Z",
"publishedDate": "2023-02-14T20:15Z"
}
}
}
MSRC_CVE-2023-21722
Vulnerability from csaf_microsoft - Published: 2023-02-14 08:00 - Updated: 2023-03-29 07:00Summary
.NET Framework Denial of Service Vulnerability
Severity
Important
Notes
Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Customer Action: Required. The vulnerability documented by this CVE requires customer action to resolve.
CWE-59
- Improper Link Resolution Before File Access ('Link Following')
Affected products
Fixed
71 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.8 4.8.4614.08
Microsoft .NET Framework 4.8
|
4.8.4614.08 | ||
|
Microsoft .NET Framework 4.8 4.8.4614.08
Microsoft .NET Framework 4.8
|
4.8.4614.08 | ||
|
Microsoft .NET Framework 4.8 4.8.4614.08
Microsoft .NET Framework 4.8
|
4.8.4614.08 | ||
|
Microsoft .NET Framework 4.8 4.8.4614.08
Microsoft .NET Framework 4.8
|
4.8.4614.08 | ||
|
Microsoft .NET Framework 4.8 4.8.4614.08
Microsoft .NET Framework 4.8
|
4.8.4614.08 | ||
|
Microsoft .NET Framework 4.8 4.8.4614.08
Microsoft .NET Framework 4.8
|
4.8.4614.08 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
10.0.4614.06 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
10.0.14393.5717 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
10.0.14393.5717 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
10.0.14393.5717 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
10.0.14393.5717 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
10.0.14393.5717 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
10.0.14393.5717 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
10.0.14393.5717 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
10.0.14393.5717 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
10.0.14393.5717 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.04614.08 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.04614.08 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.04614.08 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.04614.08 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.04614.08 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.04614.08 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
10.0.09139.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
10.0.09139.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
10.0.09139.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
10.0.09139.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
10.0.09139.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
10.0.09139.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
10.0.09139.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
10.0.09139.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
10.0.09139.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
10.0.09139.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
10.0.09139.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
10.0.09139.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
10.0.09139.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
10.0.09139.02 | ||
|
Microsoft .NET Framework 4.6.2 4.7.4038.05
Microsoft .NET Framework 4.6.2
|
4.7.4038.05 | ||
|
Microsoft .NET Framework 4.6.2 4.7.4038.05
Microsoft .NET Framework 4.6.2
|
4.7.4038.05 | ||
|
Microsoft .NET Framework 4.6.2 4.7.4038.05
Microsoft .NET Framework 4.6.2
|
4.7.4038.05 | ||
|
Microsoft .NET Framework 4.6.2 4.7.4038.05
Microsoft .NET Framework 4.6.2
|
4.7.4038.05 | ||
|
Microsoft .NET Framework 3.5 and 4.6.2 10.0.10240.19747
Microsoft .NET Framework 3.5 and 4.6.2
|
10.0.10240.19747 | ||
|
Microsoft .NET Framework 3.5 and 4.6.2 10.0.10240.19747
Microsoft .NET Framework 3.5 and 4.6.2
|
10.0.10240.19747 | ||
|
Microsoft .NET Framework 3.5 3.5.50727.8966
Microsoft .NET Framework 3.5
|
3.5.50727.8966 | ||
|
Microsoft .NET Framework 3.5 3.5.50727.8966
Microsoft .NET Framework 3.5
|
3.5.50727.8966 | ||
|
Microsoft .NET Framework 3.5 3.5.50727.8966
Microsoft .NET Framework 3.5
|
3.5.50727.8966 | ||
|
Microsoft .NET Framework 3.5 3.5.50727.8966
Microsoft .NET Framework 3.5
|
3.5.50727.8966 | ||
|
Microsoft .NET Framework 3.0 Service Pack 2 2.0.50727.8966
Microsoft .NET Framework 3.0 Service Pack 2
|
2.0.50727.8966 | ||
|
Microsoft .NET Framework 3.0 Service Pack 2 2.0.50727.8966
Microsoft .NET Framework 3.0 Service Pack 2
|
2.0.50727.8966 | ||
|
Microsoft .NET Framework 2.0 Service Pack 2 2.0.50727.8966
Microsoft .NET Framework 2.0 Service Pack 2
|
2.0.50727.8966 | ||
|
Microsoft .NET Framework 2.0 Service Pack 2 2.0.50727.8966
Microsoft .NET Framework 2.0 Service Pack 2
|
2.0.50727.8966 | ||
|
Microsoft .NET Framework 3.5.1 3.5.50727.8966
Microsoft .NET Framework 3.5.1
|
3.5.50727.8966 | ||
|
Microsoft .NET Framework 3.5.1 3.5.50727.8966
Microsoft .NET Framework 3.5.1
|
3.5.50727.8966 |
Known affected
71 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 3.5 and 4.6.2 <10.0.10240.19747
Microsoft .NET Framework 3.5 and 4.6.2
|
<10.0.10240.19747 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 and 4.6.2 <10.0.10240.19747
Microsoft .NET Framework 3.5 and 4.6.2
|
<10.0.10240.19747 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2 <4.7.4038.05
Microsoft .NET Framework 4.6.2
|
<4.7.4038.05 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2 <4.7.4038.05
Microsoft .NET Framework 4.6.2
|
<4.7.4038.05 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2 <4.7.4038.05
Microsoft .NET Framework 4.6.2
|
<4.7.4038.05 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2 <4.7.4038.05
Microsoft .NET Framework 4.6.2
|
<4.7.4038.05 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
<10.0.09139.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
<10.0.09139.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
<10.0.09139.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
<10.0.09139.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
<10.0.09139.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
<10.0.09139.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
<10.0.09139.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
<10.0.09139.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
<10.0.09139.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
<10.0.09139.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
<10.0.09139.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
<10.0.09139.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
<10.0.09139.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02
Microsoft .NET Framework 3.5 AND 4.8.1
|
<10.0.09139.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04614.08
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.04614.08 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04614.08
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.04614.08 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04614.08
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.04614.08 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04614.08
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.04614.08 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04614.08
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.04614.08 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04614.08
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.04614.08 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
<10.0.14393.5717 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
<10.0.14393.5717 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
<10.0.14393.5717 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
<10.0.14393.5717 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
<10.0.14393.5717 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
<10.0.14393.5717 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
<10.0.14393.5717 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
<10.0.14393.5717 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717
Microsoft .NET Framework 3.5 AND 4.7.2
|
<10.0.14393.5717 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06
Microsoft .NET Framework 3.5 AND 4.8
|
<10.0.4614.06 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.4614.08
Microsoft .NET Framework 4.8
|
<4.8.4614.08 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.4614.08
Microsoft .NET Framework 4.8
|
<4.8.4614.08 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.4614.08
Microsoft .NET Framework 4.8
|
<4.8.4614.08 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.4614.08
Microsoft .NET Framework 4.8
|
<4.8.4614.08 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.4614.08
Microsoft .NET Framework 4.8
|
<4.8.4614.08 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.4614.08
Microsoft .NET Framework 4.8
|
<4.8.4614.08 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5.1 <3.5.50727.8966
Microsoft .NET Framework 3.5.1
|
<3.5.50727.8966 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5.1 <3.5.50727.8966
Microsoft .NET Framework 3.5.1
|
<3.5.50727.8966 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 2.0 Service Pack 2 <2.0.50727.8966
Microsoft .NET Framework 2.0 Service Pack 2
|
<2.0.50727.8966 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 2.0 Service Pack 2 <2.0.50727.8966
Microsoft .NET Framework 2.0 Service Pack 2
|
<2.0.50727.8966 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.0 Service Pack 2 <2.0.50727.8966
Microsoft .NET Framework 3.0 Service Pack 2
|
<2.0.50727.8966 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.0 Service Pack 2 <2.0.50727.8966
Microsoft .NET Framework 3.0 Service Pack 2
|
<2.0.50727.8966 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 <3.5.50727.8966
Microsoft .NET Framework 3.5
|
<3.5.50727.8966 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 <3.5.50727.8966
Microsoft .NET Framework 3.5
|
<3.5.50727.8966 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 <3.5.50727.8966
Microsoft .NET Framework 3.5
|
<3.5.50727.8966 |
Vendor Fix
fix
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 <3.5.50727.8966
Microsoft .NET Framework 3.5
|
<3.5.50727.8966 |
Vendor Fix
fix
Vendor Fix
fix
|
Threats
Impact
Denial of Service
Exploit Status
Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
References
7 references
Acknowledgments
<a href="https://twitter.com/filip_dragovic">Filip Dragovic</a> with Infigo IS
{
"document": {
"acknowledgments": [
{
"names": [
"\u003ca href=\"https://twitter.com/filip_dragovic\"\u003eFilip Dragovic\u003c/a\u003e with Infigo IS"
]
}
],
"aggregate_severity": {
"namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
},
{
"category": "general",
"text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
"title": "Customer Action"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2023-21722 .NET Framework Denial of Service Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722"
},
{
"category": "self",
"summary": "CVE-2023-21722 .NET Framework Denial of Service Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/2023/msrc_cve-2023-21722.json"
},
{
"category": "external",
"summary": "Microsoft Exploitability Index",
"url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": ".NET Framework Denial of Service Vulnerability",
"tracking": {
"current_release_date": "2023-03-29T07:00:00.000Z",
"generator": {
"date": "2025-01-01T00:40:39.981Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2023-21722",
"initial_release_date": "2023-02-14T08:00:00.000Z",
"revision_history": [
{
"date": "2023-02-14T08:00:00.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
},
{
"date": "2023-03-23T07:00:00.000Z",
"legacy_version": "1.1",
"number": "2",
"summary": "Updated one or more CVSS scores for the affected products. This is an informational change only."
},
{
"date": "2023-03-29T07:00:00.000Z",
"legacy_version": "2",
"number": "3",
"summary": "Microsoft has rereleased KB5022498 to address a known issue where customers who installed the .NET Framework 4.8 February cumulative update (KB5022502), then updgraded to .NET Framework 4.8.1 and subsequently scanned for updates were unable to install KB5022498. Customers who were unable to install KB5022498 should rescan for updates and install the update. Customers who have already successfully installed KB5022498 do not need to take any further action."
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.4614.08",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.4614.08",
"product_id": "56"
}
},
{
"category": "product_version",
"name": "4.8.4614.08",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.4614.08",
"product_id": "11650-10051"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.4614.08",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.4614.08",
"product_id": "57"
}
},
{
"category": "product_version",
"name": "4.8.4614.08",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.4614.08",
"product_id": "11650-10049"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.4614.08",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.4614.08",
"product_id": "58"
}
},
{
"category": "product_version",
"name": "4.8.4614.08",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.4614.08",
"product_id": "11650-10378"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.4614.08",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.4614.08",
"product_id": "59"
}
},
{
"category": "product_version",
"name": "4.8.4614.08",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.4614.08",
"product_id": "11650-10379"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.4614.08",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.4614.08",
"product_id": "60"
}
},
{
"category": "product_version",
"name": "4.8.4614.08",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.4614.08",
"product_id": "11650-10483"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.4614.08",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.4614.08",
"product_id": "61"
}
},
{
"category": "product_version",
"name": "4.8.4614.08",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.4614.08",
"product_id": "11650-10543"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "36"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-11568"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "37"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-11569"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "38"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-11571"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "39"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-11572"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "40"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-11923"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "41"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-11924"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "42"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-11801"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "43"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-11802"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "44"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-11926"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "45"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-11927"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "46"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-11929"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "47"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-11930"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "48"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-11931"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c10.0.14393.5717",
"product_id": "27"
}
},
{
"category": "product_version",
"name": "10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717",
"product_id": "11677-11568"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c10.0.14393.5717",
"product_id": "28"
}
},
{
"category": "product_version",
"name": "10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717",
"product_id": "11677-11569"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c10.0.14393.5717",
"product_id": "29"
}
},
{
"category": "product_version",
"name": "10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717",
"product_id": "11677-11570"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c10.0.14393.5717",
"product_id": "30"
}
},
{
"category": "product_version",
"name": "10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717",
"product_id": "11677-11571"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c10.0.14393.5717",
"product_id": "31"
}
},
{
"category": "product_version",
"name": "10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717",
"product_id": "11677-11572"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04614.08",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.04614.08",
"product_id": "21"
}
},
{
"category": "product_version",
"name": "4.7.04614.08",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08",
"product_id": "11863-10051"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04614.08",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.04614.08",
"product_id": "22"
}
},
{
"category": "product_version",
"name": "4.7.04614.08",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08",
"product_id": "11863-10049"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04614.08",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.04614.08",
"product_id": "23"
}
},
{
"category": "product_version",
"name": "4.7.04614.08",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08",
"product_id": "11863-10378"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04614.08",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.04614.08",
"product_id": "24"
}
},
{
"category": "product_version",
"name": "4.7.04614.08",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08",
"product_id": "11863-10379"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04614.08",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.04614.08",
"product_id": "25"
}
},
{
"category": "product_version",
"name": "4.7.04614.08",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08",
"product_id": "11863-10483"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04614.08",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.04614.08",
"product_id": "26"
}
},
{
"category": "product_version",
"name": "4.7.04614.08",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08",
"product_id": "11863-10543"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c10.0.09139.02",
"product_id": "7"
}
},
{
"category": "product_version",
"name": "10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02",
"product_id": "12079-11923"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c10.0.09139.02",
"product_id": "8"
}
},
{
"category": "product_version",
"name": "10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02",
"product_id": "12079-11924"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c10.0.09139.02",
"product_id": "9"
}
},
{
"category": "product_version",
"name": "10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02",
"product_id": "12079-11801"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c10.0.09139.02",
"product_id": "10"
}
},
{
"category": "product_version",
"name": "10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02",
"product_id": "12079-11802"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c10.0.09139.02",
"product_id": "11"
}
},
{
"category": "product_version",
"name": "10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02",
"product_id": "12079-11926"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c10.0.09139.02",
"product_id": "12"
}
},
{
"category": "product_version",
"name": "10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02",
"product_id": "12079-11927"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c10.0.09139.02",
"product_id": "13"
}
},
{
"category": "product_version",
"name": "10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02",
"product_id": "12079-11929"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c10.0.09139.02",
"product_id": "14"
}
},
{
"category": "product_version",
"name": "10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02",
"product_id": "12079-11930"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c10.0.09139.02",
"product_id": "15"
}
},
{
"category": "product_version",
"name": "10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02",
"product_id": "12079-11931"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c10.0.09139.02",
"product_id": "16"
}
},
{
"category": "product_version",
"name": "10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02",
"product_id": "12079-12085"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c10.0.09139.02",
"product_id": "17"
}
},
{
"category": "product_version",
"name": "10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02",
"product_id": "12079-12086"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c10.0.09139.02",
"product_id": "18"
}
},
{
"category": "product_version",
"name": "10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02",
"product_id": "12079-12098"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c10.0.09139.02",
"product_id": "19"
}
},
{
"category": "product_version",
"name": "10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02",
"product_id": "12079-12099"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.4038.05",
"product": {
"name": "Microsoft .NET Framework 4.6.2 \u003c4.7.4038.05",
"product_id": "3"
}
},
{
"category": "product_version",
"name": "4.7.4038.05",
"product": {
"name": "Microsoft .NET Framework 4.6.2 4.7.4038.05",
"product_id": "12115-9312"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.4038.05",
"product": {
"name": "Microsoft .NET Framework 4.6.2 \u003c4.7.4038.05",
"product_id": "4"
}
},
{
"category": "product_version",
"name": "4.7.4038.05",
"product": {
"name": "Microsoft .NET Framework 4.6.2 4.7.4038.05",
"product_id": "12115-10287"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.4038.05",
"product": {
"name": "Microsoft .NET Framework 4.6.2 \u003c4.7.4038.05",
"product_id": "5"
}
},
{
"category": "product_version",
"name": "4.7.4038.05",
"product": {
"name": "Microsoft .NET Framework 4.6.2 4.7.4038.05",
"product_id": "12115-9318"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.4038.05",
"product": {
"name": "Microsoft .NET Framework 4.6.2 \u003c4.7.4038.05",
"product_id": "6"
}
},
{
"category": "product_version",
"name": "4.7.4038.05",
"product": {
"name": "Microsoft .NET Framework 4.6.2 4.7.4038.05",
"product_id": "12115-9344"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.10240.19747",
"product": {
"name": "Microsoft .NET Framework 3.5 and 4.6.2 \u003c10.0.10240.19747",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "10.0.10240.19747",
"product": {
"name": "Microsoft .NET Framework 3.5 and 4.6.2 10.0.10240.19747",
"product_id": "12128-10729"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 and 4.6.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.10240.19747",
"product": {
"name": "Microsoft .NET Framework 3.5 and 4.6.2 \u003c10.0.10240.19747",
"product_id": "2"
}
},
{
"category": "product_version",
"name": "10.0.10240.19747",
"product": {
"name": "Microsoft .NET Framework 3.5 and 4.6.2 10.0.10240.19747",
"product_id": "12128-10735"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 and 4.6.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.8966",
"product": {
"name": "Microsoft .NET Framework 2.0 Service Pack 2 \u003c2.0.50727.8966",
"product_id": "64"
}
},
{
"category": "product_version",
"name": "2.0.50727.8966",
"product": {
"name": "Microsoft .NET Framework 2.0 Service Pack 2 2.0.50727.8966",
"product_id": "9292-9312"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 2.0 Service Pack 2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.8966",
"product": {
"name": "Microsoft .NET Framework 2.0 Service Pack 2 \u003c2.0.50727.8966",
"product_id": "65"
}
},
{
"category": "product_version",
"name": "2.0.50727.8966",
"product": {
"name": "Microsoft .NET Framework 2.0 Service Pack 2 2.0.50727.8966",
"product_id": "9292-9318"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 2.0 Service Pack 2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.0 Service Pack 2 \u003c2.0.50727.8966",
"product_id": "66"
}
},
{
"category": "product_version",
"name": "2.0.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.0 Service Pack 2 2.0.50727.8966",
"product_id": "9195-9312"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.0 Service Pack 2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.0.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.0 Service Pack 2 \u003c2.0.50727.8966",
"product_id": "67"
}
},
{
"category": "product_version",
"name": "2.0.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.0 Service Pack 2 2.0.50727.8966",
"product_id": "9195-9318"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.0 Service Pack 2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c3.5.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.5 \u003c3.5.50727.8966",
"product_id": "68"
}
},
{
"category": "product_version",
"name": "3.5.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.5 3.5.50727.8966",
"product_id": "2472-10378"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c3.5.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.5 \u003c3.5.50727.8966",
"product_id": "69"
}
},
{
"category": "product_version",
"name": "3.5.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.5 3.5.50727.8966",
"product_id": "2472-10379"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c3.5.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.5 \u003c3.5.50727.8966",
"product_id": "70"
}
},
{
"category": "product_version",
"name": "3.5.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.5 3.5.50727.8966",
"product_id": "2472-10483"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c3.5.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.5 \u003c3.5.50727.8966",
"product_id": "71"
}
},
{
"category": "product_version",
"name": "3.5.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.5 3.5.50727.8966",
"product_id": "2472-10543"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c3.5.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.5.1 \u003c3.5.50727.8966",
"product_id": "62"
}
},
{
"category": "product_version",
"name": "3.5.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.5.1 3.5.50727.8966",
"product_id": "9495-10051"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c3.5.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.5.1 \u003c3.5.50727.8966",
"product_id": "63"
}
},
{
"category": "product_version",
"name": "3.5.50727.8966",
"product": {
"name": "Microsoft .NET Framework 3.5.1 3.5.50727.8966",
"product_id": "9495-10049"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c10.0.09139.02",
"product_id": "20"
}
},
{
"category": "product_version",
"name": "10.0.09139.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02",
"product_id": "12079-12097"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c10.0.14393.5717",
"product_id": "32"
}
},
{
"category": "product_version",
"name": "10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717",
"product_id": "11677-10816"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "49"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-12097"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "50"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-10852"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "51"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-10855"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c10.0.14393.5717",
"product_id": "33"
}
},
{
"category": "product_version",
"name": "10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717",
"product_id": "11677-10853"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "52"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-12099"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "53"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-12098"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "54"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-10853"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c10.0.14393.5717",
"product_id": "34"
}
},
{
"category": "product_version",
"name": "10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717",
"product_id": "11677-10855"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c10.0.4614.06",
"product_id": "55"
}
},
{
"category": "product_version",
"name": "10.0.4614.06",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06",
"product_id": "11676-10816"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c10.0.14393.5717",
"product_id": "35"
}
},
{
"category": "product_version",
"name": "10.0.14393.5717",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717",
"product_id": "11677-10852"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-21722",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"notes": [
{
"category": "general",
"text": "Microsoft",
"title": "Assigning CNA"
},
{
"category": "faq",
"text": "Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.",
"title": "According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?"
},
{
"category": "faq",
"text": "The attack itself is carried out locally. For example, when the score indicates that the Attack Vector is Local and User Interaction is Required, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website. This could lead to a local attack on the victim\u0027s computer which could cause a denial of service.",
"title": "According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is Denial of Service?"
}
],
"product_status": {
"fixed": [
"11650-10049",
"11650-10051",
"11650-10378",
"11650-10379",
"11650-10483",
"11650-10543",
"11676-10816",
"11676-10852",
"11676-10853",
"11676-10855",
"11676-11568",
"11676-11569",
"11676-11571",
"11676-11572",
"11676-11801",
"11676-11802",
"11676-11923",
"11676-11924",
"11676-11926",
"11676-11927",
"11676-11929",
"11676-11930",
"11676-11931",
"11676-12097",
"11676-12098",
"11676-12099",
"11677-10816",
"11677-10852",
"11677-10853",
"11677-10855",
"11677-11568",
"11677-11569",
"11677-11570",
"11677-11571",
"11677-11572",
"11863-10049",
"11863-10051",
"11863-10378",
"11863-10379",
"11863-10483",
"11863-10543",
"12079-11801",
"12079-11802",
"12079-11923",
"12079-11924",
"12079-11926",
"12079-11927",
"12079-11929",
"12079-11930",
"12079-11931",
"12079-12085",
"12079-12086",
"12079-12097",
"12079-12098",
"12079-12099",
"12115-10287",
"12115-9312",
"12115-9318",
"12115-9344",
"12128-10729",
"12128-10735",
"2472-10378",
"2472-10379",
"2472-10483",
"2472-10543",
"9195-9312",
"9195-9318",
"9292-9312",
"9292-9318",
"9495-10049",
"9495-10051"
],
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36",
"37",
"38",
"39",
"40",
"41",
"42",
"43",
"44",
"45",
"46",
"47",
"48",
"49",
"50",
"51",
"52",
"53",
"54",
"55",
"56",
"57",
"58",
"59",
"60",
"61",
"62",
"63",
"64",
"65",
"66",
"67",
"68",
"69",
"70",
"71"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-21722 .NET Framework Denial of Service Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722"
},
{
"category": "self",
"summary": "CVE-2023-21722 .NET Framework Denial of Service Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "4.8.4614.08:Monthly Rollup:https://support.microsoft.com/help/5022731",
"product_ids": [
"56",
"57"
],
"url": "https://support.microsoft.com/help/5022731"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "4.8.4614.07:Security Only:https://support.microsoft.com/help/5022783",
"product_ids": [
"56",
"57"
],
"url": "https://support.microsoft.com/help/5022783"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "4.8.04614.05:Monthly Rollup:https://support.microsoft.com/help/5022732",
"product_ids": [
"58",
"59"
],
"url": "https://support.microsoft.com/help/5022732"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "4.8.04614.03:Security Only:https://support.microsoft.com/help/5022784",
"product_ids": [
"58",
"59"
],
"url": "https://support.microsoft.com/help/5022784"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "4.8.04614.05:Monthly Rollup:https://support.microsoft.com/help/5022733",
"product_ids": [
"60",
"61"
],
"url": "https://support.microsoft.com/help/5022733"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "4.8.04614.03:Security Only:https://support.microsoft.com/help/5022785",
"product_ids": [
"60",
"61"
],
"url": "https://support.microsoft.com/help/5022785"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.04614.06:Security Update:https://support.microsoft.com/help/5022782",
"product_ids": [
"36",
"37",
"38",
"39"
],
"url": "https://support.microsoft.com/help/5022782"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.04614.06:Security Update:https://support.microsoft.com/help/5022735",
"product_ids": [
"40",
"41"
],
"url": "https://support.microsoft.com/help/5022735"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.04614.06:Security Update:https://support.microsoft.com/help/5022727",
"product_ids": [
"42",
"43"
],
"url": "https://support.microsoft.com/help/5022727"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.4614.06:Security Update:https://support.microsoft.com/help/5022730",
"product_ids": [
"44",
"45"
],
"url": "https://support.microsoft.com/help/5022730"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.04614.06:Security Update:https://support.microsoft.com/help/5022728",
"product_ids": [
"46",
"47"
],
"url": "https://support.microsoft.com/help/5022728"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.04614.06:Monthly Rollup:https://support.microsoft.com/help/5022728",
"product_ids": [
"48"
],
"url": "https://support.microsoft.com/help/5022728"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.04038.03:Security Update:https://support.microsoft.com/help/5022782",
"product_ids": [
"27",
"28",
"29",
"30",
"31"
],
"url": "https://support.microsoft.com/help/5022782"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "4.7.04614.08:Monthly Rollup:https://support.microsoft.com/help/5022731",
"product_ids": [
"21",
"22"
],
"url": "https://support.microsoft.com/help/5022731"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "4.7.04038.05:Security Only:https://support.microsoft.com/help/5022783",
"product_ids": [
"21",
"22"
],
"url": "https://support.microsoft.com/help/5022783"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "4.7.04038.03:Monthly Rollup:https://support.microsoft.com/help/5022732",
"product_ids": [
"23",
"24"
],
"url": "https://support.microsoft.com/help/5022732"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "4.7.04038.02:Security Only:https://support.microsoft.com/help/5022784",
"product_ids": [
"23",
"24"
],
"url": "https://support.microsoft.com/help/5022784"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "4.7.04038.03:Monthly Rollup:https://support.microsoft.com/help/5022733",
"product_ids": [
"25",
"26"
],
"url": "https://support.microsoft.com/help/5022733"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "4.7.04038.02:Security Only:https://support.microsoft.com/help/5022785",
"product_ids": [
"25",
"26"
],
"url": "https://support.microsoft.com/help/5022785"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.09139.02:Security Update:https://support.microsoft.com/help/5022735",
"product_ids": [
"7",
"8"
],
"url": "https://support.microsoft.com/help/5022735"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.09139.02:Security Update:https://support.microsoft.com/help/5022727",
"product_ids": [
"9",
"10"
],
"url": "https://support.microsoft.com/help/5022727"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.09139.02:Security Update:https://support.microsoft.com/help/5022730",
"product_ids": [
"11",
"12"
],
"url": "https://support.microsoft.com/help/5022730"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.09139.02:Security Update:https://support.microsoft.com/help/5022728",
"product_ids": [
"13",
"14",
"15"
],
"url": "https://support.microsoft.com/help/5022728"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.09139.02:Security Update:https://support.microsoft.com/help/5022497",
"product_ids": [
"16",
"17"
],
"url": "https://support.microsoft.com/help/5022497"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.09139.02:Security Update:https://support.microsoft.com/help/5022729",
"product_ids": [
"18",
"19",
"20"
],
"url": "https://support.microsoft.com/help/5022729"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "4.7.04038.06:Monthly Rollup:https://support.microsoft.com/help/5022734",
"product_ids": [
"3",
"4",
"5",
"6"
],
"url": "https://support.microsoft.com/help/5022734"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "4.7.4038.05:Security Only:https://support.microsoft.com/help/5022786",
"product_ids": [
"3",
"4",
"5",
"6"
],
"url": "https://support.microsoft.com/help/5022786"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.10240.19747:Security Update:https://support.microsoft.com/help/5022858",
"product_ids": [
"1",
"2"
],
"url": "https://support.microsoft.com/help/5022858"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "2.0.50727.8966:Monthly Rollup:https://support.microsoft.com/help/5022734",
"product_ids": [
"64",
"65",
"66",
"67"
],
"url": "https://support.microsoft.com/help/5022734"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "2.0.04038.05:Security Only:https://support.microsoft.com/help/5022786",
"product_ids": [
"64",
"65",
"66",
"67"
],
"url": "https://support.microsoft.com/help/5022786"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "3.5.50727.8966:Monthly Rollup:https://support.microsoft.com/help/5022732",
"product_ids": [
"68",
"69"
],
"url": "https://support.microsoft.com/help/5022732"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "3.5.50727.8966:Security Only:https://support.microsoft.com/help/5022784",
"product_ids": [
"68",
"69"
],
"url": "https://support.microsoft.com/help/5022784"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "3.5.50727.8966:Monthly Rollup:https://support.microsoft.com/help/5022733",
"product_ids": [
"70",
"71"
],
"url": "https://support.microsoft.com/help/5022733"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "2.0.50727.8966:Security Only:https://support.microsoft.com/help/5022785",
"product_ids": [
"70",
"71"
],
"url": "https://support.microsoft.com/help/5022785"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "3.5.50727.8966:Monthly Rollup:https://support.microsoft.com/help/5022731",
"product_ids": [
"62",
"63"
],
"url": "https://support.microsoft.com/help/5022731"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "2.0.50727.8966:Security Only:https://support.microsoft.com/help/5022783",
"product_ids": [
"62",
"63"
],
"url": "https://support.microsoft.com/help/5022783"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.14393.5717:Security Update:https://support.microsoft.com/help/5022838",
"product_ids": [
"32",
"33",
"34",
"35"
],
"url": "https://support.microsoft.com/help/5022838"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.04614.06:Security Update:https://support.microsoft.com/help/5022729",
"product_ids": [
"49",
"52",
"53"
],
"url": "https://support.microsoft.com/help/5022729"
},
{
"category": "vendor_fix",
"date": "2023-02-14T08:00:00.000Z",
"details": "10.0.04614.05:Security Update:https://support.microsoft.com/help/5022503",
"product_ids": [
"50",
"51",
"54",
"55"
],
"url": "https://support.microsoft.com/help/5022503"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"environmentalsScore": 0.0,
"exploitCodeMaturity": "UNPROVEN",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 4.4,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36",
"37",
"38",
"39",
"40",
"41",
"42",
"43",
"44",
"45",
"46",
"47",
"48",
"49",
"50",
"51",
"52",
"53",
"54",
"55",
"56",
"57",
"58",
"59",
"60",
"61",
"62",
"63",
"64",
"65",
"66",
"67",
"68",
"69",
"70",
"71"
]
}
],
"threats": [
{
"category": "impact",
"details": "Denial of Service"
},
{
"category": "exploit_status",
"details": "Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"
}
],
"title": ".NET Framework Denial of Service Vulnerability"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…