{ "document": { "acknowledgments": [ { "names": [ "Filip Dragovic with Infigo IS" ] } ], "aggregate_severity": { "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Public", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle", "title": "Additional Resources" }, { "category": "legal_disclaimer", "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.", "title": "Disclaimer" }, { "category": "general", "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.", "title": "Customer Action" } ], "publisher": { "category": "vendor", "contact_details": "secure@microsoft.com", "name": "Microsoft Security Response Center", "namespace": "https://msrc.microsoft.com" }, "references": [ { "category": "self", "summary": "CVE-2023-21722 .NET Framework Denial of Service Vulnerability - HTML", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722" }, { "category": "self", "summary": "CVE-2023-21722 .NET Framework Denial of Service Vulnerability - CSAF", "url": "https://msrc.microsoft.com/csaf/2023/msrc_cve-2023-21722.json" }, { "category": "external", "summary": "Microsoft Exploitability Index", "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1" }, { "category": "external", "summary": "Microsoft Support Lifecycle", "url": "https://support.microsoft.com/lifecycle" }, { "category": "external", "summary": "Common Vulnerability Scoring System", "url": "https://www.first.org/cvss" } ], "title": ".NET Framework Denial of Service Vulnerability", "tracking": { "current_release_date": "2023-03-29T07:00:00.000Z", "generator": { "date": "2025-01-01T00:40:39.981Z", "engine": { "name": "MSRC Generator", "version": "1.0" } }, "id": "msrc_CVE-2023-21722", "initial_release_date": "2023-02-14T08:00:00.000Z", "revision_history": [ { "date": "2023-02-14T08:00:00.000Z", "legacy_version": "1", "number": "1", "summary": "Information published." }, { "date": "2023-03-23T07:00:00.000Z", "legacy_version": "1.1", "number": "2", "summary": "Updated one or more CVSS scores for the affected products. This is an informational change only." }, { "date": "2023-03-29T07:00:00.000Z", "legacy_version": "2", "number": "3", "summary": "Microsoft has rereleased KB5022498 to address a known issue where customers who installed the .NET Framework 4.8 February cumulative update (KB5022502), then updgraded to .NET Framework 4.8.1 and subsequently scanned for updates were unable to install KB5022498. Customers who were unable to install KB5022498 should rescan for updates and install the update. Customers who have already successfully installed KB5022498 do not need to take any further action." } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_version_range", "name": "<4.8.4614.08", "product": { "name": "Microsoft .NET Framework 4.8 <4.8.4614.08", "product_id": "56" } }, { "category": "product_version", "name": "4.8.4614.08", "product": { "name": "Microsoft .NET Framework 4.8 4.8.4614.08", "product_id": "11650-10051" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<4.8.4614.08", "product": { "name": "Microsoft .NET Framework 4.8 <4.8.4614.08", "product_id": "57" } }, { "category": "product_version", "name": "4.8.4614.08", "product": { "name": "Microsoft .NET Framework 4.8 4.8.4614.08", "product_id": "11650-10049" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<4.8.4614.08", "product": { "name": "Microsoft .NET Framework 4.8 <4.8.4614.08", "product_id": "58" } }, { "category": "product_version", "name": "4.8.4614.08", "product": { "name": "Microsoft .NET Framework 4.8 4.8.4614.08", "product_id": "11650-10378" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<4.8.4614.08", "product": { "name": "Microsoft .NET Framework 4.8 <4.8.4614.08", "product_id": "59" } }, { "category": "product_version", "name": "4.8.4614.08", "product": { "name": "Microsoft .NET Framework 4.8 4.8.4614.08", "product_id": "11650-10379" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<4.8.4614.08", "product": { "name": "Microsoft .NET Framework 4.8 <4.8.4614.08", "product_id": "60" } }, { "category": "product_version", "name": "4.8.4614.08", "product": { "name": "Microsoft .NET Framework 4.8 4.8.4614.08", "product_id": "11650-10483" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<4.8.4614.08", "product": { "name": "Microsoft .NET Framework 4.8 <4.8.4614.08", "product_id": "61" } }, { "category": "product_version", "name": "4.8.4614.08", "product": { "name": "Microsoft .NET Framework 4.8 4.8.4614.08", "product_id": "11650-10543" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "36" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-11568" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "37" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-11569" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "38" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-11571" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "39" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-11572" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "40" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-11923" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "41" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-11924" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "42" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-11801" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "43" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-11802" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "44" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-11926" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "45" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-11927" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "46" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-11929" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "47" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-11930" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "48" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-11931" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717", "product_id": "27" } }, { "category": "product_version", "name": "10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717", "product_id": "11677-11568" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.7.2" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717", "product_id": "28" } }, { "category": "product_version", "name": "10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717", "product_id": "11677-11569" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.7.2" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717", "product_id": "29" } }, { "category": "product_version", "name": "10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717", "product_id": "11677-11570" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.7.2" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717", "product_id": "30" } }, { "category": "product_version", "name": "10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717", "product_id": "11677-11571" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.7.2" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717", "product_id": "31" } }, { "category": "product_version", "name": "10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717", "product_id": "11677-11572" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.7.2" }, { "branches": [ { "category": "product_version_range", "name": "<4.7.04614.08", "product": { "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04614.08", "product_id": "21" } }, { "category": "product_version", "name": "4.7.04614.08", "product": { "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08", "product_id": "11863-10051" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2" }, { "branches": [ { "category": "product_version_range", "name": "<4.7.04614.08", "product": { "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04614.08", "product_id": "22" } }, { "category": "product_version", "name": "4.7.04614.08", "product": { "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08", "product_id": "11863-10049" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2" }, { "branches": [ { "category": "product_version_range", "name": "<4.7.04614.08", "product": { "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04614.08", "product_id": "23" } }, { "category": "product_version", "name": "4.7.04614.08", "product": { "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08", "product_id": "11863-10378" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2" }, { "branches": [ { "category": "product_version_range", "name": "<4.7.04614.08", "product": { "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04614.08", "product_id": "24" } }, { "category": "product_version", "name": "4.7.04614.08", "product": { "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08", "product_id": "11863-10379" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2" }, { "branches": [ { "category": "product_version_range", "name": "<4.7.04614.08", "product": { "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04614.08", "product_id": "25" } }, { "category": "product_version", "name": "4.7.04614.08", "product": { "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08", "product_id": "11863-10483" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2" }, { "branches": [ { "category": "product_version_range", "name": "<4.7.04614.08", "product": { "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04614.08", "product_id": "26" } }, { "category": "product_version", "name": "4.7.04614.08", "product": { "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04614.08", "product_id": "11863-10543" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02", "product_id": "7" } }, { "category": "product_version", "name": "10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02", "product_id": "12079-11923" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8.1" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02", "product_id": "8" } }, { "category": "product_version", "name": "10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02", "product_id": "12079-11924" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8.1" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02", "product_id": "9" } }, { "category": "product_version", "name": "10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02", "product_id": "12079-11801" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8.1" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02", "product_id": "10" } }, { "category": "product_version", "name": "10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02", "product_id": "12079-11802" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8.1" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02", "product_id": "11" } }, { "category": "product_version", "name": "10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02", "product_id": "12079-11926" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8.1" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02", "product_id": "12" } }, { "category": "product_version", "name": "10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02", "product_id": "12079-11927" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8.1" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02", "product_id": "13" } }, { "category": "product_version", "name": "10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02", "product_id": "12079-11929" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8.1" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02", "product_id": "14" } }, { "category": "product_version", "name": "10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02", "product_id": "12079-11930" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8.1" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02", "product_id": "15" } }, { "category": "product_version", "name": "10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02", "product_id": "12079-11931" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8.1" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02", "product_id": "16" } }, { "category": "product_version", "name": "10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02", "product_id": "12079-12085" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8.1" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02", "product_id": "17" } }, { "category": "product_version", "name": "10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02", "product_id": "12079-12086" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8.1" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02", "product_id": "18" } }, { "category": "product_version", "name": "10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02", "product_id": "12079-12098" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8.1" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02", "product_id": "19" } }, { "category": "product_version", "name": "10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02", "product_id": "12079-12099" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8.1" }, { "branches": [ { "category": "product_version_range", "name": "<4.7.4038.05", "product": { "name": "Microsoft .NET Framework 4.6.2 <4.7.4038.05", "product_id": "3" } }, { "category": "product_version", "name": "4.7.4038.05", "product": { "name": "Microsoft .NET Framework 4.6.2 4.7.4038.05", "product_id": "12115-9312" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.6.2" }, { "branches": [ { "category": "product_version_range", "name": "<4.7.4038.05", "product": { "name": "Microsoft .NET Framework 4.6.2 <4.7.4038.05", "product_id": "4" } }, { "category": "product_version", "name": "4.7.4038.05", "product": { "name": "Microsoft .NET Framework 4.6.2 4.7.4038.05", "product_id": "12115-10287" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.6.2" }, { "branches": [ { "category": "product_version_range", "name": "<4.7.4038.05", "product": { "name": "Microsoft .NET Framework 4.6.2 <4.7.4038.05", "product_id": "5" } }, { "category": "product_version", "name": "4.7.4038.05", "product": { "name": "Microsoft .NET Framework 4.6.2 4.7.4038.05", "product_id": "12115-9318" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.6.2" }, { "branches": [ { "category": "product_version_range", "name": "<4.7.4038.05", "product": { "name": "Microsoft .NET Framework 4.6.2 <4.7.4038.05", "product_id": "6" } }, { "category": "product_version", "name": "4.7.4038.05", "product": { "name": "Microsoft .NET Framework 4.6.2 4.7.4038.05", "product_id": "12115-9344" } } ], "category": "product_name", "name": "Microsoft .NET Framework 4.6.2" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.10240.19747", "product": { "name": "Microsoft .NET Framework 3.5 and 4.6.2 <10.0.10240.19747", "product_id": "1" } }, { "category": "product_version", "name": "10.0.10240.19747", "product": { "name": "Microsoft .NET Framework 3.5 and 4.6.2 10.0.10240.19747", "product_id": "12128-10729" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 and 4.6.2" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.10240.19747", "product": { "name": "Microsoft .NET Framework 3.5 and 4.6.2 <10.0.10240.19747", "product_id": "2" } }, { "category": "product_version", "name": "10.0.10240.19747", "product": { "name": "Microsoft .NET Framework 3.5 and 4.6.2 10.0.10240.19747", "product_id": "12128-10735" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 and 4.6.2" }, { "branches": [ { "category": "product_version_range", "name": "<2.0.50727.8966", "product": { "name": "Microsoft .NET Framework 2.0 Service Pack 2 <2.0.50727.8966", "product_id": "64" } }, { "category": "product_version", "name": "2.0.50727.8966", "product": { "name": "Microsoft .NET Framework 2.0 Service Pack 2 2.0.50727.8966", "product_id": "9292-9312" } } ], "category": "product_name", "name": "Microsoft .NET Framework 2.0 Service Pack 2" }, { "branches": [ { "category": "product_version_range", "name": "<2.0.50727.8966", "product": { "name": "Microsoft .NET Framework 2.0 Service Pack 2 <2.0.50727.8966", "product_id": "65" } }, { "category": "product_version", "name": "2.0.50727.8966", "product": { "name": "Microsoft .NET Framework 2.0 Service Pack 2 2.0.50727.8966", "product_id": "9292-9318" } } ], "category": "product_name", "name": "Microsoft .NET Framework 2.0 Service Pack 2" }, { "branches": [ { "category": "product_version_range", "name": "<2.0.50727.8966", "product": { "name": "Microsoft .NET Framework 3.0 Service Pack 2 <2.0.50727.8966", "product_id": "66" } }, { "category": "product_version", "name": "2.0.50727.8966", "product": { "name": "Microsoft .NET Framework 3.0 Service Pack 2 2.0.50727.8966", "product_id": "9195-9312" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.0 Service Pack 2" }, { "branches": [ { "category": "product_version_range", "name": "<2.0.50727.8966", "product": { "name": "Microsoft .NET Framework 3.0 Service Pack 2 <2.0.50727.8966", "product_id": "67" } }, { "category": "product_version", "name": "2.0.50727.8966", "product": { "name": "Microsoft .NET Framework 3.0 Service Pack 2 2.0.50727.8966", "product_id": "9195-9318" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.0 Service Pack 2" }, { "branches": [ { "category": "product_version_range", "name": "<3.5.50727.8966", "product": { "name": "Microsoft .NET Framework 3.5 <3.5.50727.8966", "product_id": "68" } }, { "category": "product_version", "name": "3.5.50727.8966", "product": { "name": "Microsoft .NET Framework 3.5 3.5.50727.8966", "product_id": "2472-10378" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5" }, { "branches": [ { "category": "product_version_range", "name": "<3.5.50727.8966", "product": { "name": "Microsoft .NET Framework 3.5 <3.5.50727.8966", "product_id": "69" } }, { "category": "product_version", "name": "3.5.50727.8966", "product": { "name": "Microsoft .NET Framework 3.5 3.5.50727.8966", "product_id": "2472-10379" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5" }, { "branches": [ { "category": "product_version_range", "name": "<3.5.50727.8966", "product": { "name": "Microsoft .NET Framework 3.5 <3.5.50727.8966", "product_id": "70" } }, { "category": "product_version", "name": "3.5.50727.8966", "product": { "name": "Microsoft .NET Framework 3.5 3.5.50727.8966", "product_id": "2472-10483" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5" }, { "branches": [ { "category": "product_version_range", "name": "<3.5.50727.8966", "product": { "name": "Microsoft .NET Framework 3.5 <3.5.50727.8966", "product_id": "71" } }, { "category": "product_version", "name": "3.5.50727.8966", "product": { "name": "Microsoft .NET Framework 3.5 3.5.50727.8966", "product_id": "2472-10543" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5" }, { "branches": [ { "category": "product_version_range", "name": "<3.5.50727.8966", "product": { "name": "Microsoft .NET Framework 3.5.1 <3.5.50727.8966", "product_id": "62" } }, { "category": "product_version", "name": "3.5.50727.8966", "product": { "name": "Microsoft .NET Framework 3.5.1 3.5.50727.8966", "product_id": "9495-10051" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5.1" }, { "branches": [ { "category": "product_version_range", "name": "<3.5.50727.8966", "product": { "name": "Microsoft .NET Framework 3.5.1 <3.5.50727.8966", "product_id": "63" } }, { "category": "product_version", "name": "3.5.50727.8966", "product": { "name": "Microsoft .NET Framework 3.5.1 3.5.50727.8966", "product_id": "9495-10049" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5.1" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 <10.0.09139.02", "product_id": "20" } }, { "category": "product_version", "name": "10.0.09139.02", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8.1 10.0.09139.02", "product_id": "12079-12097" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8.1" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717", "product_id": "32" } }, { "category": "product_version", "name": "10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717", "product_id": "11677-10816" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.7.2" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "49" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-12097" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "50" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-10852" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "51" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-10855" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717", "product_id": "33" } }, { "category": "product_version", "name": "10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717", "product_id": "11677-10853" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.7.2" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "52" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-12099" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "53" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-12098" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "54" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-10853" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717", "product_id": "34" } }, { "category": "product_version", "name": "10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717", "product_id": "11677-10855" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.7.2" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 <10.0.4614.06", "product_id": "55" } }, { "category": "product_version", "name": "10.0.4614.06", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.8 10.0.4614.06", "product_id": "11676-10816" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.8" }, { "branches": [ { "category": "product_version_range", "name": "<10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 <10.0.14393.5717", "product_id": "35" } }, { "category": "product_version", "name": "10.0.14393.5717", "product": { "name": "Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.5717", "product_id": "11677-10852" } } ], "category": "product_name", "name": "Microsoft .NET Framework 3.5 AND 4.7.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-21722", "cwe": { "id": "CWE-59", "name": "Improper Link Resolution Before File Access ('Link Following')" }, "notes": [ { "category": "general", "text": "Microsoft", "title": "Assigning CNA" }, { "category": "faq", "text": "Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.", "title": "According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?" }, { "category": "faq", "text": "The attack itself is carried out locally. For example, when the score indicates that the Attack Vector is Local and User Interaction is Required, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website. This could lead to a local attack on the victim's computer which could cause a denial of service.", "title": "According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is Denial of Service?" } ], "product_status": { "fixed": [ "11650-10049", "11650-10051", "11650-10378", "11650-10379", "11650-10483", "11650-10543", "11676-10816", "11676-10852", "11676-10853", "11676-10855", "11676-11568", "11676-11569", "11676-11571", "11676-11572", "11676-11801", "11676-11802", "11676-11923", "11676-11924", "11676-11926", "11676-11927", "11676-11929", "11676-11930", "11676-11931", "11676-12097", "11676-12098", "11676-12099", "11677-10816", "11677-10852", "11677-10853", "11677-10855", "11677-11568", "11677-11569", "11677-11570", "11677-11571", "11677-11572", "11863-10049", "11863-10051", "11863-10378", "11863-10379", "11863-10483", "11863-10543", "12079-11801", "12079-11802", "12079-11923", "12079-11924", "12079-11926", "12079-11927", "12079-11929", "12079-11930", "12079-11931", "12079-12085", "12079-12086", "12079-12097", "12079-12098", "12079-12099", "12115-10287", "12115-9312", "12115-9318", "12115-9344", "12128-10729", "12128-10735", "2472-10378", "2472-10379", "2472-10483", "2472-10543", "9195-9312", "9195-9318", "9292-9312", "9292-9318", "9495-10049", "9495-10051" ], "known_affected": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12", "13", "14", "15", "16", "17", "18", "19", "20", "21", "22", "23", "24", "25", "26", "27", "28", "29", "30", "31", "32", "33", "34", "35", "36", "37", "38", "39", "40", "41", "42", "43", "44", "45", "46", "47", "48", "49", "50", "51", "52", "53", "54", "55", "56", "57", "58", "59", "60", "61", "62", "63", "64", "65", "66", "67", "68", "69", "70", "71" ] }, "references": [ { "category": "self", "summary": "CVE-2023-21722 .NET Framework Denial of Service Vulnerability - HTML", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722" }, { "category": "self", "summary": "CVE-2023-21722 .NET Framework Denial of Service Vulnerability - CSAF", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722" } ], "remediations": [ { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "4.8.4614.08:Monthly Rollup:https://support.microsoft.com/help/5022731", "product_ids": [ "56", "57" ], "url": "https://support.microsoft.com/help/5022731" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "4.8.4614.07:Security Only:https://support.microsoft.com/help/5022783", "product_ids": [ "56", "57" ], "url": "https://support.microsoft.com/help/5022783" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "4.8.04614.05:Monthly Rollup:https://support.microsoft.com/help/5022732", "product_ids": [ "58", "59" ], "url": "https://support.microsoft.com/help/5022732" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "4.8.04614.03:Security Only:https://support.microsoft.com/help/5022784", "product_ids": [ "58", "59" ], "url": "https://support.microsoft.com/help/5022784" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "4.8.04614.05:Monthly Rollup:https://support.microsoft.com/help/5022733", "product_ids": [ "60", "61" ], "url": "https://support.microsoft.com/help/5022733" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "4.8.04614.03:Security Only:https://support.microsoft.com/help/5022785", "product_ids": [ "60", "61" ], "url": "https://support.microsoft.com/help/5022785" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.04614.06:Security Update:https://support.microsoft.com/help/5022782", "product_ids": [ "36", "37", "38", "39" ], "url": "https://support.microsoft.com/help/5022782" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.04614.06:Security Update:https://support.microsoft.com/help/5022735", "product_ids": [ "40", "41" ], "url": "https://support.microsoft.com/help/5022735" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.04614.06:Security Update:https://support.microsoft.com/help/5022727", "product_ids": [ "42", "43" ], "url": "https://support.microsoft.com/help/5022727" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.4614.06:Security Update:https://support.microsoft.com/help/5022730", "product_ids": [ "44", "45" ], "url": "https://support.microsoft.com/help/5022730" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.04614.06:Security Update:https://support.microsoft.com/help/5022728", "product_ids": [ "46", "47" ], "url": "https://support.microsoft.com/help/5022728" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.04614.06:Monthly Rollup:https://support.microsoft.com/help/5022728", "product_ids": [ "48" ], "url": "https://support.microsoft.com/help/5022728" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.04038.03:Security Update:https://support.microsoft.com/help/5022782", "product_ids": [ "27", "28", "29", "30", "31" ], "url": "https://support.microsoft.com/help/5022782" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "4.7.04614.08:Monthly Rollup:https://support.microsoft.com/help/5022731", "product_ids": [ "21", "22" ], "url": "https://support.microsoft.com/help/5022731" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "4.7.04038.05:Security Only:https://support.microsoft.com/help/5022783", "product_ids": [ "21", "22" ], "url": "https://support.microsoft.com/help/5022783" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "4.7.04038.03:Monthly Rollup:https://support.microsoft.com/help/5022732", "product_ids": [ "23", "24" ], "url": "https://support.microsoft.com/help/5022732" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "4.7.04038.02:Security Only:https://support.microsoft.com/help/5022784", "product_ids": [ "23", "24" ], "url": "https://support.microsoft.com/help/5022784" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "4.7.04038.03:Monthly Rollup:https://support.microsoft.com/help/5022733", "product_ids": [ "25", "26" ], "url": "https://support.microsoft.com/help/5022733" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "4.7.04038.02:Security Only:https://support.microsoft.com/help/5022785", "product_ids": [ "25", "26" ], "url": "https://support.microsoft.com/help/5022785" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.09139.02:Security Update:https://support.microsoft.com/help/5022735", "product_ids": [ "7", "8" ], "url": "https://support.microsoft.com/help/5022735" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.09139.02:Security Update:https://support.microsoft.com/help/5022727", "product_ids": [ "9", "10" ], "url": "https://support.microsoft.com/help/5022727" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.09139.02:Security Update:https://support.microsoft.com/help/5022730", "product_ids": [ "11", "12" ], "url": "https://support.microsoft.com/help/5022730" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.09139.02:Security Update:https://support.microsoft.com/help/5022728", "product_ids": [ "13", "14", "15" ], "url": "https://support.microsoft.com/help/5022728" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.09139.02:Security Update:https://support.microsoft.com/help/5022497", "product_ids": [ "16", "17" ], "url": "https://support.microsoft.com/help/5022497" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.09139.02:Security Update:https://support.microsoft.com/help/5022729", "product_ids": [ "18", "19", "20" ], "url": "https://support.microsoft.com/help/5022729" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "4.7.04038.06:Monthly Rollup:https://support.microsoft.com/help/5022734", "product_ids": [ "3", "4", "5", "6" ], "url": "https://support.microsoft.com/help/5022734" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "4.7.4038.05:Security Only:https://support.microsoft.com/help/5022786", "product_ids": [ "3", "4", "5", "6" ], "url": "https://support.microsoft.com/help/5022786" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.10240.19747:Security Update:https://support.microsoft.com/help/5022858", "product_ids": [ "1", "2" ], "url": "https://support.microsoft.com/help/5022858" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "2.0.50727.8966:Monthly Rollup:https://support.microsoft.com/help/5022734", "product_ids": [ "64", "65", "66", "67" ], "url": "https://support.microsoft.com/help/5022734" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "2.0.04038.05:Security Only:https://support.microsoft.com/help/5022786", "product_ids": [ "64", "65", "66", "67" ], "url": "https://support.microsoft.com/help/5022786" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "3.5.50727.8966:Monthly Rollup:https://support.microsoft.com/help/5022732", "product_ids": [ "68", "69" ], "url": "https://support.microsoft.com/help/5022732" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "3.5.50727.8966:Security Only:https://support.microsoft.com/help/5022784", "product_ids": [ "68", "69" ], "url": "https://support.microsoft.com/help/5022784" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "3.5.50727.8966:Monthly Rollup:https://support.microsoft.com/help/5022733", "product_ids": [ "70", "71" ], "url": "https://support.microsoft.com/help/5022733" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "2.0.50727.8966:Security Only:https://support.microsoft.com/help/5022785", "product_ids": [ "70", "71" ], "url": "https://support.microsoft.com/help/5022785" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "3.5.50727.8966:Monthly Rollup:https://support.microsoft.com/help/5022731", "product_ids": [ "62", "63" ], "url": "https://support.microsoft.com/help/5022731" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "2.0.50727.8966:Security Only:https://support.microsoft.com/help/5022783", "product_ids": [ "62", "63" ], "url": "https://support.microsoft.com/help/5022783" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.14393.5717:Security Update:https://support.microsoft.com/help/5022838", "product_ids": [ "32", "33", "34", "35" ], "url": "https://support.microsoft.com/help/5022838" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.04614.06:Security Update:https://support.microsoft.com/help/5022729", "product_ids": [ "49", "52", "53" ], "url": "https://support.microsoft.com/help/5022729" }, { "category": "vendor_fix", "date": "2023-02-14T08:00:00.000Z", "details": "10.0.04614.05:Security Update:https://support.microsoft.com/help/5022503", "product_ids": [ "50", "51", "54", "55" ], "url": "https://support.microsoft.com/help/5022503" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "environmentalsScore": 0.0, "exploitCodeMaturity": "UNPROVEN", "integrityImpact": "NONE", "privilegesRequired": "LOW", "remediationLevel": "OFFICIAL_FIX", "reportConfidence": "CONFIRMED", "scope": "UNCHANGED", "temporalScore": 4.4, "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C", "version": "3.1" }, "products": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12", "13", "14", "15", "16", "17", "18", "19", "20", "21", "22", "23", "24", "25", "26", "27", "28", "29", "30", "31", "32", "33", "34", "35", "36", "37", "38", "39", "40", "41", "42", "43", "44", "45", "46", "47", "48", "49", "50", "51", "52", "53", "54", "55", "56", "57", "58", "59", "60", "61", "62", "63", "64", "65", "66", "67", "68", "69", "70", "71" ] } ], "threats": [ { "category": "impact", "details": "Denial of Service" }, { "category": "exploit_status", "details": "Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely" } ], "title": ".NET Framework Denial of Service Vulnerability" } ] }