Patchfirst
ChainMicrosoft · .NET 6.0NuGet:Microsoft.AspNetCore.App.Runtime.linux-arm

Microsoft .NET 6.0: successive fixes (2022)

3 CVEs over 2 generations, 9 Mar 2022 to 10 May 2022.

Family tree

Left to right by publication date.Oldest first. Select a CVE to open it.
  1. CVE-2022-244649 Mar 2022 First in the chain
  2. CVE-2022-2911710 May 2022 next fix after CVE-2022-24464
  3. CVE-2022-2914510 May 2022 next fix after CVE-2022-24464
Mar 2022AprMay CVE-2022-24464 → CVE-2022-29117: Next fix in the same package (medium confidence)CVE-2022-24464 → CVE-2022-29145: Next fix in the same package (medium confidence) CVE-2022-24464 9 Mar 2022 CVE-2022-29117 10 May 2022 CVE-2022-29145 10 May 2022 Mar 2022AprMay CVE-2022-24464 → CVE-2022-29117: Next fix in the same package (medium confidence)CVE-2022-24464 → CVE-2022-29145: Next fix in the same package (medium confidence) CVE-2022-24464 9 Mar 2022 CVE-2022-29117 10 May 2022 CVE-2022-29145 10 May 2022
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low

CVEs in this family

Table view of the tree
CVEPublishedTitleLinked fromPriority
CVE-2022-24464 9 Mar 2022 .NET and Visual Studio Denial of Service Vulnerability · fixed in 6.0.3 First in chain 23.1
CVE-2022-29117 10 May 2022 .NET and Visual Studio Denial of Service Vulnerability · fixed in 6.0.5 CVE-2022-24464 · Next fix in the same package · Medium 28.9
CVE-2022-29145 10 May 2022 .NET and Visual Studio Denial of Service Vulnerability · fixed in 6.0.5 CVE-2022-24464 · Next fix in the same package · Medium 23.8
↑ ↓ chooseEnter openEsc close