Most recent entries from all

ALSA-2022:6521 — Moderate: .NET 6.0 security and bugfix update

2026-10-03T01:41:03.124311+00:00

Affected: AlmaLinux:9: aspnetcore-runtime-6.0, AlmaLinux:9: aspnetcore-targeting-pack-6.0, AlmaLinux:9: dotnet-apphost-pack-6.0, AlmaLinux:9: dotnet-host, AlmaLinux:9: dotnet-hostfxr-6.0, AlmaLinux:9: dotnet-runtime-6.0, AlmaLinux:9: dotnet-sdk-6.0, AlmaLinux:9: dotnet-sdk-6.0-source-built-artifacts, AlmaLinux:9: dotnet-targeting-pack-6.0, AlmaLinux:9: dotnet-templates-6.0 and 1 more

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.109 and Runtime 6.0.9.

Security Fix(es):

* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2023-06584

2026-10-03T01:41:03.124395+00:00

bdu:2023-06584

BIT-dotnet-2022-38013 — .NET Core and Visual Studio Denial of Service Vulnerability

2026-10-03T01:41:03.124413+00:00

Affected: Bitnami: dotnet

.NET Core and Visual Studio Denial of Service Vulnerability

certfr-2022-avi-840 — De multiples vulnérabilités ont été corrigées dans Microsoft .Net. Elles permettent à un at…

2026-10-03T01:41:03.124434+00:00

certfr-2022-avi-840

CLEANSTART-2024-JX92340 — .NET Core and Visual Studio Denial of Service Vulnerability

2026-10-03T01:41:03.124450+00:00

Affected: CleanStart: dotnet6-build, CleanStart: dotnet6-runtime

CVE-2022-38013 affects multiple packages. . See references for individual vulnerability details.

EUVD-2026-321961

2026-10-03T01:41:03.124471+00:00

EUVD-2026-321961

fkie_cve-2022-38013

2026-10-03T01:41:03.124483+00:00

.NET Core and Visual Studio Denial of Service Vulnerability

GHSA-r8m2-4x37-6592 — .NET Denial of Service Vulnerability

2026-10-03T01:41:03.124502+00:00

Affected: NuGet: Microsoft.AspNetCore.App.Runtime.linux-arm, NuGet: Microsoft.AspNetCore.App.Runtime.linux-arm64, NuGet: Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, NuGet: Microsoft.AspNetCore.App.Runtime.linux-musl-x64, NuGet: Microsoft.AspNetCore.App.Runtime.linux-x64, NuGet: Microsoft.AspNetCore.App.Runtime.osx-x64, NuGet: Microsoft.AspNetCore.App.Runtime.win-arm, NuGet: Microsoft.AspNetCore.App.Runtime.win-arm64, NuGet: Microsoft.AspNetCore.App.Runtime.win-x64, NuGet: Microsoft.AspNetCore.App.Runtime.win-x86 and 2 more

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET Core 3.1 and .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A denial of service vulnerability exists in ASP.NET Core 3.1 and .NET 6.0 where a malicious client could cause a stack overflow which may result in a denial of service attack when an attacker sends a customized payload that is parsed during model binding.

## Affected software * Any .NET 6.0 application running on .NET 6.0.8 or earlier. * Any ASP.NET Core 3.1 application running on .NET Core 3.1.28 or earlier. If your application uses the following package versions, ensure you update to the latest version of .NET. ### .NET Core 3.1 Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm)|>= 3.1.0, < 3.1.29|3.1.29 [Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64)|>= 3.1.0, < 3.1.29|3.1.29 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64)|>= 3.1.0, < 3.1.29|3.1.29 [Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Micros…

gsd-2022-38013

2026-10-03T01:41:03.124619+00:00

gsd-2022-38013

msrc_CVE-2022-38013 — .NET Core and Visual Studio Denial of Service Vulnerability

2026-10-03T01:41:03.124632+00:00

msrc_CVE-2022-38013

RHSA-2022:6520 — Red Hat Security Advisory: .NET 6.0 on RHEL 7 security and bugfix update

2026-10-03T01:41:03.124649+00:00

dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.

RHSA-2022:6521 — Red Hat Security Advisory: .NET 6.0 security and bugfix update

2026-10-03T01:41:03.124666+00:00

dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.

UBUNTU-CVE-2022-38013

2026-10-03T01:41:03.124682+00:00

Affected: Ubuntu:22.04:LTS: dotnet6

.NET Core and Visual Studio Denial of Service Vulnerability

WID-SEC-W-2022-1403 — Microsoft Developer Tools: Mehrere Schwachstellen

2026-10-03T01:41:03.124699+00:00

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft .NET Framework, Microsoft Visual Studio und Microsoft Visual Studio Code ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und beliebigen Code auszuführen.