{
  "affected": [
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.1.0"
            },
            {
              "fixed": "3.1.29"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.1.0"
            },
            {
              "fixed": "3.1.29"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.1.0"
            },
            {
              "fixed": "3.1.29"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.1.0"
            },
            {
              "fixed": "3.1.29"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.1.0"
            },
            {
              "fixed": "3.1.29"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.1.0"
            },
            {
              "fixed": "3.1.29"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.1.0"
            },
            {
              "fixed": "3.1.29"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.1.0"
            },
            {
              "fixed": "3.1.29"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.1.0"
            },
            {
              "fixed": "3.1.29"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.1.0"
            },
            {
              "fixed": "3.1.29"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "6.0.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "6.0.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "6.0.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "6.0.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "6.0.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "6.0.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.osx-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "6.0.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "6.0.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "6.0.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "6.0.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "6.0.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "6.0.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2022-38013"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": true,
    "github_reviewed_at": "2022-09-15T03:25:36Z",
    "nvd_published_at": "2022-09-13T19:15:00Z",
    "severity": "HIGH"
  },
  "details": "Microsoft is releasing this security advisory to provide information about a vulnerability in .NET Core 3.1 and .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nA denial of service vulnerability exists in ASP.NET Core 3.1 and .NET 6.0 where a malicious client could cause a stack overflow which may result in a denial of service attack when an attacker sends a customized payload that is parsed during model binding.\n\n## \u003ca name=\"affected-software\"\u003e\u003c/a\u003eAffected software\n* Any .NET 6.0 application running on .NET 6.0.8 or earlier.\n* Any ASP.NET Core 3.1 application running on .NET Core 3.1.28 or earlier.\nIf your application uses the following package versions, ensure you update to the latest version of .NET.\n### \u003ca name=\"ASP.NET Core 3.1\"\u003e\u003c/a\u003e.NET Core 3.1\nPackage name | Affected version | Patched version\n------------ | ---------------- | -------------------------\n[Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64)|\u003e= 3.1.5, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n### \u003ca name=\".NET 6\"\u003e\u003c/a\u003e.NET 6\nPackage name | Affected version | Patched version\n------------ | ---------------- | -------------------------\n[Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm)|\u003e= 5.0.1, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.osx-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-arm64)|\u003e= 6.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n\n\n\n### Other\n\nAnnouncement for this issue can be found at https://github.com/dotnet/announcements/issues/234\nAn Issue for this can be found at https://github.com/dotnet/aspnetcore/issues/43953\nMSRC details for this can be found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38013",
  "id": "GHSA-r8m2-4x37-6592",
  "modified": "2022-09-15T03:25:36Z",
  "published": "2022-09-15T03:25:36Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38013"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/dotnet/aspnetcore"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M"
    },
    {
      "type": "WEB",
      "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": ".NET Denial of Service Vulnerability"
}

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202209-0872",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "36"
      },
      {
        "model": "visual studio 2022",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "17.3"
      },
      {
        "model": "visual studio 2019",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.11"
      },
      {
        "model": ".net",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "6.0.0"
      },
      {
        "model": ".net core",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "3.1"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "35"
      },
      {
        "model": "visual studio 2022",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "17.0"
      },
      {
        "model": "visual studio 2019",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.9"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "37"
      },
      {
        "model": "visual studio 2022",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "17.2"
      },
      {
        "model": ".net core",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": null
      },
      {
        "model": "microsoft visual studio",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": null
      },
      {
        "model": "visual studio 2022 for mac",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": "17.3"
      },
      {
        "model": ".net",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-002370"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-38013"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:.net_core:3.1:-:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:16.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:16.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2022:17.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:.net:6.0.0:-:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2022:17.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2022:17.3:*:*:*:*:mac:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2022:17.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-38013"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Graham Esau with Vonage\u003c/a\u003e",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202209-835"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2022-38013",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "secure@microsoft.com",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "OTHER",
            "availabilityImpact": "High",
            "baseScore": 7.5,
            "baseSeverity": "High",
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "JVNDB-2022-002370",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "secure@microsoft.com",
            "id": "CVE-2022-38013",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "OTHER",
            "id": "JVNDB-2022-002370",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202209-835",
            "trust": 0.6,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-002370"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-38013"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202209-835"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": ".NET Core and Visual Studio Denial of Service Vulnerability. 9) - aarch64, s390x, x86_64\n\n3. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n====================================================================                   \nRed Hat Security Advisory\n\nSynopsis:          Moderate: .NET 6.0 on RHEL 7 security and bugfix update\nAdvisory ID:       RHSA-2022:6520-01\nProduct:           .NET Core on Red Hat Enterprise Linux\nAdvisory URL:      https://access.redhat.com/errata/RHSA-2022:6520\nIssue date:        2022-09-14\nCVE Names:         CVE-2022-38013\n====================================================================\n1. Summary:\n\nAn update for .NET 6.0 is now available for Red Hat Enterprise Linux 7. \n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\n.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64\n.NET Core on Red Hat Enterprise Linux Server (v. 7) - x86_64\n.NET Core on Red Hat Enterprise Linux Workstation (v. 7) - x86_64\n\n3. Description:\n\n.NET is a managed-software framework. It implements a subset of the .NET\nframework APIs and several new APIs, and it includes a CLR implementation. \n\nNew versions of .NET that address a security vulnerability are now\navailable. The updated versions are .NET SDK 6.0.109 and .NET Runtime\n6.0.9. \n\nSecurity Fix(es):\n\n* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow\nvia ModelStateDictionary recursion. (CVE-2022-38013)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n2125124 - CVE-2022-38013 dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. \n\n6. Package List:\n\n.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7):\n\nSource:\nrh-dotnet60-dotnet-6.0.109-1.el7_9.src.rpm\n\nx86_64:\nrh-dotnet60-aspnetcore-runtime-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-apphost-pack-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-debuginfo-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-host-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-hostfxr-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-runtime-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-targeting-pack-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-templates-6.0-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-netstandard-targeting-pack-2.1-6.0.109-1.el7_9.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux Server (v. 7):\n\nSource:\nrh-dotnet60-dotnet-6.0.109-1.el7_9.src.rpm\n\nx86_64:\nrh-dotnet60-aspnetcore-runtime-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-apphost-pack-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-debuginfo-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-host-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-hostfxr-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-runtime-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-targeting-pack-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-templates-6.0-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-netstandard-targeting-pack-2.1-6.0.109-1.el7_9.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nrh-dotnet60-dotnet-6.0.109-1.el7_9.src.rpm\n\nx86_64:\nrh-dotnet60-aspnetcore-runtime-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-apphost-pack-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-debuginfo-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-host-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-hostfxr-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-runtime-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-targeting-pack-6.0-6.0.9-1.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-templates-6.0-6.0.109-1.el7_9.x86_64.rpm\nrh-dotnet60-netstandard-targeting-pack-2.1-6.0.109-1.el7_9.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security.  Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2022-38013\nhttps://access.redhat.com/security/updates/classification/#moderate\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2022 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\nkfEWkmIv1MQ=RwCJ\n-----END PGP SIGNATURE-----\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://listman.redhat.com/mailman/listinfo/rhsa-announce\n. ==========================================================================\nUbuntu Security Notice USN-5609-1\nSeptember 13, 2022\n\ndotnet6 vulnerability\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 22.04 LTS\n\nSummary:\n\n.NET 6 could be made to crash if it parsed a specially crafted file. \n\nSoftware Description:\n- dotnet6: dotNET CLI tools and runtime\n\nDetails:\n\nGraham Esau discovered that .NET 6 incorrectly parsed certain payloads\nduring model binding. An attacker could possibly use this issue to\ncause a denial of service. \n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 22.04 LTS:\n   aspnetcore-runtime-6.0          6.0.109-0ubuntu1~22.04.1\n   dotnet-host                             6.0.109-0ubuntu1~22.04.1\n   dotnet-hostfxr-6.0                   6.0.109-0ubuntu1~22.04.1\n   dotnet-runtime-6.0                  6.0.109-0ubuntu1~22.04.1\n   dotnet-sdk-6.0                        6.0.109-0ubuntu1~22.04.1\n   dotnet6                                   6.0.109-0ubuntu1~22.04.1\n\nIn general, a standard system update will make all the necessary \nchanges. A restart may be required after the update if any affected \nfiles are being used",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-38013"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-002370"
      },
      {
        "db": "PACKETSTORM",
        "id": "168388"
      },
      {
        "db": "PACKETSTORM",
        "id": "168385"
      },
      {
        "db": "PACKETSTORM",
        "id": "168389"
      },
      {
        "db": "PACKETSTORM",
        "id": "168390"
      },
      {
        "db": "PACKETSTORM",
        "id": "168373"
      },
      {
        "db": "PACKETSTORM",
        "id": "168396"
      }
    ],
    "trust": 2.16
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-38013",
        "trust": 3.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-002370",
        "trust": 0.8
      },
      {
        "db": "PACKETSTORM",
        "id": "168390",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "168373",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "168396",
        "trust": 0.7
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2022.4603",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2022.4596",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202209-835",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "168388",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "168385",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "168389",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-002370"
      },
      {
        "db": "PACKETSTORM",
        "id": "168388"
      },
      {
        "db": "PACKETSTORM",
        "id": "168385"
      },
      {
        "db": "PACKETSTORM",
        "id": "168389"
      },
      {
        "db": "PACKETSTORM",
        "id": "168390"
      },
      {
        "db": "PACKETSTORM",
        "id": "168373"
      },
      {
        "db": "PACKETSTORM",
        "id": "168396"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-38013"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202209-835"
      }
    ]
  },
  "id": "VAR-202209-0872",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.21178882
  },
  "last_update_date": "2023-12-21T22:10:27.238000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": ".NET\u00a0Core\u00a0and\u00a0Visual\u00a0Studio\u00a0Denial\u00a0of\u00a0Service\u00a0Vulnerability Security Update Guide",
        "trust": 0.8,
        "url": "https://msrc.microsoft.com/update-guide/en-us/vulnerability/cve-2022-38013"
      },
      {
        "title": "Microsoft .NET Core  and Microsoft Visual Studio Security vulnerabilities",
        "trust": 0.6,
        "url": "http://123.124.177.30/web/xxk/bdxqbyid.tag?id=207344"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-002370"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202209-835"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-noinfo",
        "trust": 1.0
      },
      {
        "problemtype": "Lack of information (CWE-noinfo) [NVD evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-002370"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-38013"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.6,
        "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2022-38013"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-38013"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-38013"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2cul3z7meed7rfqzvgql2mtksffzkaay/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7hcv4tqgotofho5etrkgfkagyv2yauve/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ja6f4cdkli3malv6uk3p2dr5agcltt7y/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/k4k5yl7usokir3o2dukbzmypwxypdkxg/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/wl334ckoha6bqqsyjw365hiwj4ioe45m/"
      },
      {
        "trust": 0.8,
        "url": "https://www.ipa.go.jp/security/ciadr/vul/20220914-ms.html"
      },
      {
        "trust": 0.8,
        "url": "https://www.jpcert.or.jp/at/2022/at220024.html"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/k4k5yl7usokir3o2dukbzmypwxypdkxg/"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2cul3z7meed7rfqzvgql2mtksffzkaay/"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7hcv4tqgotofho5etrkgfkagyv2yauve/"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/wl334ckoha6bqqsyjw365hiwj4ioe45m/"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ja6f4cdkli3malv6uk3p2dr5agcltt7y/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2022.4603"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/microsoft-net-visual-studio-denial-of-service-39266"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-38013/"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/168390/red-hat-security-advisory-2022-6522-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2022.4596"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/168373/ubuntu-security-notice-usn-5609-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/cve-2022-38013"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/168396/red-hat-security-advisory-2022-6539-01.html"
      },
      {
        "trust": 0.5,
        "url": "https://listman.redhat.com/mailman/listinfo/rhsa-announce"
      },
      {
        "trust": 0.5,
        "url": "https://access.redhat.com/security/team/key/"
      },
      {
        "trust": 0.5,
        "url": "https://access.redhat.com/articles/11258"
      },
      {
        "trust": 0.5,
        "url": "https://access.redhat.com/security/team/contact/"
      },
      {
        "trust": 0.5,
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "trust": 0.5,
        "url": "https://bugzilla.redhat.com/):"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:6523"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:6521"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:6520"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:6522"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/dotnet6/6.0.109-0ubuntu1~22.04.1"
      },
      {
        "trust": 0.1,
        "url": "https://ubuntu.com/security/notices/usn-5609-1"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:6539"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-002370"
      },
      {
        "db": "PACKETSTORM",
        "id": "168388"
      },
      {
        "db": "PACKETSTORM",
        "id": "168385"
      },
      {
        "db": "PACKETSTORM",
        "id": "168389"
      },
      {
        "db": "PACKETSTORM",
        "id": "168390"
      },
      {
        "db": "PACKETSTORM",
        "id": "168373"
      },
      {
        "db": "PACKETSTORM",
        "id": "168396"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-38013"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202209-835"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-002370"
      },
      {
        "db": "PACKETSTORM",
        "id": "168388"
      },
      {
        "db": "PACKETSTORM",
        "id": "168385"
      },
      {
        "db": "PACKETSTORM",
        "id": "168389"
      },
      {
        "db": "PACKETSTORM",
        "id": "168390"
      },
      {
        "db": "PACKETSTORM",
        "id": "168373"
      },
      {
        "db": "PACKETSTORM",
        "id": "168396"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-38013"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202209-835"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-09-21T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-002370"
      },
      {
        "date": "2022-09-15T14:19:18",
        "db": "PACKETSTORM",
        "id": "168388"
      },
      {
        "date": "2022-09-15T14:17:56",
        "db": "PACKETSTORM",
        "id": "168385"
      },
      {
        "date": "2022-09-15T14:19:41",
        "db": "PACKETSTORM",
        "id": "168389"
      },
      {
        "date": "2022-09-15T14:19:51",
        "db": "PACKETSTORM",
        "id": "168390"
      },
      {
        "date": "2022-09-14T15:07:11",
        "db": "PACKETSTORM",
        "id": "168373"
      },
      {
        "date": "2022-09-15T14:21:28",
        "db": "PACKETSTORM",
        "id": "168396"
      },
      {
        "date": "2022-09-13T19:15:12.867000",
        "db": "NVD",
        "id": "CVE-2022-38013"
      },
      {
        "date": "2022-09-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202209-835"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-09-21T09:04:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-002370"
      },
      {
        "date": "2023-12-20T20:15:14.580000",
        "db": "NVD",
        "id": "CVE-2022-38013"
      },
      {
        "date": "2022-12-09T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202209-835"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202209-835"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": ".NET\u00a0Core\u00a0 and \u00a0Visual\u00a0Studio\u00a0 Service operation interruption in \u00a0(DoS)\u00a0 Vulnerability",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-002370"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "other",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202209-835"
      }
    ],
    "trust": 0.6
  }
}

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Microsoft .NET Framework ist eine Komponente des Microsoft Windows-Betriebssystems, das die Erstellung und Ausf\u00fchrung von Softwareanwendungen und Webdiensten erm\u00f6glicht. Es beinhaltet sowohl eine Laufzeitumgebung als auch ein Framework von Klassenbibliotheken (APIs), u. a. f\u00fcr die Programmiersprache ASP (ASP.NET), den Datenzugriff (ADO.NET), intelligente Clientanwendungen (Windows Forms) und weitere.\r\nMicrosoft Visual Studio ist eine integrierte Entwicklungsumgebung f\u00fcr Hochsprachen.\r\nVisual Studio Code ist ein Quelltext-Editor von Microsoft.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft .NET Framework, Microsoft Visual Studio und Microsoft Visual Studio Code ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und beliebigen Code auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-1403 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-1403.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-1403 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1403"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-253 vom 2022-12-09",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2022-253.html"
      },
      {
        "category": "external",
        "summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates vom 2022-09-13",
        "url": "https://msrc.microsoft.com/update-guide"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:6521 vom 2022-09-14",
        "url": "https://access.redhat.com/errata/RHSA-2022:6521"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-6523 vom 2022-09-15",
        "url": "https://linux.oracle.com/errata/ELSA-2022-6523.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:6522 vom 2022-09-14",
        "url": "https://access.redhat.com/errata/RHSA-2022:6522"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:6520 vom 2022-09-14",
        "url": "https://access.redhat.com/errata/RHSA-2022:6520"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:6523 vom 2022-09-14",
        "url": "https://access.redhat.com/errata/RHSA-2022:6523"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-6521 vom 2022-09-15",
        "url": "http://linux.oracle.com/errata/ELSA-2022-6521.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:6539 vom 2022-09-15",
        "url": "https://access.redhat.com/errata/RHSA-2022:6539"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-6539 vom 2022-09-15",
        "url": "http://linux.oracle.com/errata/ELSA-2022-6539.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Microsoft Developer Tools: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2022-12-11T23:00:00.000+00:00",
      "generator": {
        "date": "2024-02-15T16:58:16.983+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.0"
        }
      },
      "id": "WID-SEC-W-2022-1403",
      "initial_release_date": "2022-09-13T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2022-09-13T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2022-09-14T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Red Hat und Oracle Linux aufgenommen"
        },
        {
          "date": "2022-09-15T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Red Hat und Oracle Linux aufgenommen"
        },
        {
          "date": "2022-10-03T22:00:00.000+00:00",
          "number": "4",
          "summary": "Referenz(en) aufgenommen: FEDORA-2022-847C67B3CD, FEDORA-2022-980D492C98"
        },
        {
          "date": "2022-10-20T22:00:00.000+00:00",
          "number": "5",
          "summary": "Referenz(en) aufgenommen: FEDORA-2022-34A610D9BF, FEDORA-2022-D80B1D2827"
        },
        {
          "date": "2022-12-11T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Amazon aufgenommen"
        }
      ],
      "status": "final",
      "version": "6"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Microsoft .NET Framework 3.5.1",
                "product": {
                  "name": "Microsoft .NET Framework 3.5.1",
                  "product_id": "130815",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:3.5.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft .NET Framework 4.6.1",
                "product": {
                  "name": "Microsoft .NET Framework 4.6.1",
                  "product_id": "330405",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:4.6.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft .NET Framework 4.6.2",
                "product": {
                  "name": "Microsoft .NET Framework 4.6.2",
                  "product_id": "336763",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:4.6.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft .NET Framework 4.7.1",
                "product": {
                  "name": "Microsoft .NET Framework 4.7.1",
                  "product_id": "432555",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:4.7.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft .NET Framework 4.7.2",
                "product": {
                  "name": "Microsoft .NET Framework 4.7.2",
                  "product_id": "432556",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:4.7.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft .NET Framework 4.8",
                "product": {
                  "name": "Microsoft .NET Framework 4.8",
                  "product_id": "432557",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:4.8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft .NET Framework 3.5",
                "product": {
                  "name": "Microsoft .NET Framework 3.5",
                  "product_id": "834793",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:3.5:-"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft .NET Framework 2.0 SP2",
                "product": {
                  "name": "Microsoft .NET Framework 2.0 SP2",
                  "product_id": "T021515",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:2.0_sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft .NET Framework 3.0 SP2",
                "product": {
                  "name": "Microsoft .NET Framework 3.0 SP2",
                  "product_id": "T024564",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:3.0_sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft .NET Framework 4.6",
                "product": {
                  "name": "Microsoft .NET Framework 4.6",
                  "product_id": "T024566",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:4.6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft .NET Framework 4.8.1",
                "product": {
                  "name": "Microsoft .NET Framework 4.8.1",
                  "product_id": "T024567",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:4.8.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft .NET Framework 4.7",
                "product": {
                  "name": "Microsoft .NET Framework 4.7",
                  "product_id": "T024568",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:4.7"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": ".NET Framework"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Microsoft Visual Studio 2022 version 17.0",
                "product": {
                  "name": "Microsoft Visual Studio 2022 version 17.0",
                  "product_id": "T022258",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:visual_studio:2022_version_17.0"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft Visual Studio 2022 version 17.2",
                "product": {
                  "name": "Microsoft Visual Studio 2022 version 17.2",
                  "product_id": "T023507",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:visual_studio:2022_version_17.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft Visual Studio 2022 for Mac version 17.3",
                "product": {
                  "name": "Microsoft Visual Studio 2022 for Mac version 17.3",
                  "product_id": "T024559",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:visual_studio:2022_for_mac_version_17.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft Visual Studio 2022 version 17.3",
                "product": {
                  "name": "Microsoft Visual Studio 2022 version 17.3",
                  "product_id": "T024560",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:visual_studio:2022_version_17.3"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Visual Studio"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Microsoft Visual Studio 2019 version 16.9",
                "product": {
                  "name": "Microsoft Visual Studio 2019 version 16.9",
                  "product_id": "T024562",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:visual_studio_2019:version_16.9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Microsoft Visual Studio 2019 version 16.11",
                "product": {
                  "name": "Microsoft Visual Studio 2019 version 16.11",
                  "product_id": "T024563",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:visual_studio_2019:version_16.11"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Visual Studio 2019"
          },
          {
            "category": "product_name",
            "name": "Microsoft Visual Studio Code",
            "product": {
              "name": "Microsoft Visual Studio Code",
              "product_id": "T017475",
              "product_identification_helper": {
                "cpe": "cpe:/a:microsoft:visual_studio_code:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-26929",
      "notes": [
        {
          "category": "description",
          "text": "Es existieren mehrere Schwachstellen in Microsoft .NET Framework, Microsoft Visual Studio und Microsoft Visual Studio Code, die noch nicht im Detail beschrieben wurden. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und beliebigen Code auszuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "432555",
          "432556",
          "67646",
          "330405",
          "432557",
          "130815",
          "T004914",
          "834793",
          "T017475",
          "336763",
          "T023507",
          "T024568",
          "T021515",
          "T022258",
          "T024567",
          "T024559",
          "T024564",
          "T024563",
          "398363",
          "T024566",
          "T024560",
          "T024562"
        ]
      },
      "release_date": "2022-09-13T22:00:00Z",
      "title": "CVE-2022-26929"
    },
    {
      "cve": "CVE-2022-38013",
      "notes": [
        {
          "category": "description",
          "text": "Es existieren mehrere Schwachstellen in Microsoft .NET Framework, Microsoft Visual Studio und Microsoft Visual Studio Code, die noch nicht im Detail beschrieben wurden. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und beliebigen Code auszuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "432555",
          "432556",
          "67646",
          "330405",
          "432557",
          "130815",
          "T004914",
          "834793",
          "T017475",
          "336763",
          "T023507",
          "T024568",
          "T021515",
          "T022258",
          "T024567",
          "T024559",
          "T024564",
          "T024563",
          "398363",
          "T024566",
          "T024560",
          "T024562"
        ]
      },
      "release_date": "2022-09-13T22:00:00Z",
      "title": "CVE-2022-38013"
    },
    {
      "cve": "CVE-2022-38020",
      "notes": [
        {
          "category": "description",
          "text": "Es existieren mehrere Schwachstellen in Microsoft .NET Framework, Microsoft Visual Studio und Microsoft Visual Studio Code, die noch nicht im Detail beschrieben wurden. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und beliebigen Code auszuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "432555",
          "432556",
          "67646",
          "330405",
          "432557",
          "130815",
          "T004914",
          "834793",
          "T017475",
          "336763",
          "T023507",
          "T024568",
          "T021515",
          "T022258",
          "T024567",
          "T024559",
          "T024564",
          "T024563",
          "398363",
          "T024566",
          "T024560",
          "T024562"
        ]
      },
      "release_date": "2022-09-13T22:00:00Z",
      "title": "CVE-2022-38020"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 3.1.423 and .NET Runtime 3.1.29.\n\nSecurity Fix(es):\n\n* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:6523",
        "url": "https://access.redhat.com/errata/RHSA-2022:6523"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2125124",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2125124"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6523.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET Core 3.1 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T01:37:48+00:00",
      "generator": {
        "date": "2024-11-06T01:37:48+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:6523",
      "initial_release_date": "2022-09-14T14:05:53+00:00",
      "revision_history": [
        {
          "date": "2022-09-14T14:05:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-09-14T14:05:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T01:37:48+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.6.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CRB (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux CRB (v. 8)",
                  "product_id": "CRB-8.6.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
                "product": {
                  "name": "aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
                  "product_id": "aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-3.1@3.1.29-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
                "product": {
                  "name": "aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
                  "product_id": "aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-3.1@3.1.29-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64",
                  "product_id": "dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-3.1@3.1.29-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64",
                  "product_id": "dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-3.1@3.1.29-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
                  "product_id": "dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-3.1@3.1.29-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64",
                  "product_id": "dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-3.1@3.1.423-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
                  "product_id": "dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-3.1@3.1.29-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64",
                  "product_id": "dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-3.1@3.1.423-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64",
                  "product_id": "dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet3.1-debugsource@3.1.423-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
                  "product_id": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-3.1-debuginfo@3.1.29-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
                  "product_id": "dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-3.1-debuginfo@3.1.29-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
                  "product_id": "dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-3.1-debuginfo@3.1.29-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
                  "product_id": "dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-3.1-debuginfo@3.1.423-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
                  "product_id": "dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet3.1-debuginfo@3.1.423-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64",
                  "product_id": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-3.1-source-built-artifacts@3.1.423-1.el8_6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet3.1-0:3.1.423-1.el8_6.src",
                "product": {
                  "name": "dotnet3.1-0:3.1.423-1.el8_6.src",
                  "product_id": "dotnet3.1-0:3.1.423-1.el8_6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet3.1@3.1.423-1.el8_6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-0:3.1.423-1.el8_6.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet3.1-0:3.1.423-1.el8_6.src"
        },
        "product_reference": "dotnet3.1-0:3.1.423-1.el8_6.src",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64"
        },
        "product_reference": "dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64"
        },
        "product_reference": "dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-0:3.1.423-1.el8_6.src as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet3.1-0:3.1.423-1.el8_6.src"
        },
        "product_reference": "dotnet3.1-0:3.1.423-1.el8_6.src",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64"
        },
        "product_reference": "dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64"
        },
        "product_reference": "dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-38013",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2022-09-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2125124"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": ".NET Core and Visual Studio Denial of Service Vulnerability",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet3.1-0:3.1.423-1.el8_6.src",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet3.1-0:3.1.423-1.el8_6.src",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-38013"
        },
        {
          "category": "external",
          "summary": "RHBZ#2125124",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2125124"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-38013",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-38013"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38013"
        }
      ],
      "release_date": "2022-09-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-14T14:05:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet3.1-0:3.1.423-1.el8_6.src",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet3.1-0:3.1.423-1.el8_6.src",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6523"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet3.1-0:3.1.423-1.el8_6.src",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-3.1-debuginfo-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-0:3.1.423-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-3.1-0:3.1.29-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-3.1-0:3.1.423-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet3.1-0:3.1.423-1.el8_6.src",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet3.1-debuginfo-0:3.1.423-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet3.1-debugsource-0:3.1.423-1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion."
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 3.1.423 and .NET Runtime 3.1.29.\n\nSecurity Fix(es):\n\n* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:6522",
        "url": "https://access.redhat.com/errata/RHSA-2022:6522"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2125124",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2125124"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6522.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET Core 3.1 on RHEL 7 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T01:37:51+00:00",
      "generator": {
        "date": "2024-11-06T01:37:51+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:6522",
      "initial_release_date": "2022-09-14T13:41:30+00:00",
      "revision_history": [
        {
          "date": "2022-09-14T13:41:30+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-09-14T13:41:30+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T01:37:51+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                  "product_id": "7ComputeNode-dotNET-3.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:3.1::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-dotNET-3.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:3.1::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-dotNET-3.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:3.1::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": ".NET Core on Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-aspnetcore-runtime-3.1@3.1.29-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-aspnetcore-targeting-pack-3.1@3.1.29-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet@3.1.423-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-apphost-pack-3.1@3.1.29-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-host@3.1.29-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-hostfxr-3.1@3.1.29-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-runtime-3.1@3.1.29-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-sdk-3.1@3.1.423-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts@3.1.423-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-targeting-pack-3.1@3.1.29-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-templates-3.1@3.1.423-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-netstandard-targeting-pack-2.1@3.1.423-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-debuginfo@3.1.423-1.el7_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
                "product": {
                  "name": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
                  "product_id": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet@3.1.423-1.el7_9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-38013",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2022-09-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2125124"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": ".NET Core and Visual Studio Denial of Service Vulnerability",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-38013"
        },
        {
          "category": "external",
          "summary": "RHBZ#2125124",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2125124"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-38013",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-38013"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38013"
        }
      ],
      "release_date": "2022-09-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-14T13:41:30+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6522"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.423-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.423-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.29-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.423-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.423-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.29-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.423-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.423-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion."
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET 6.0 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.109 and Runtime 6.0.9.\n\nSecurity Fix(es):\n\n* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:6521",
        "url": "https://access.redhat.com/errata/RHSA-2022:6521"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2125124",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2125124"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6521.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET 6.0 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T01:37:34+00:00",
      "generator": {
        "date": "2024-11-06T01:37:34+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:6521",
      "initial_release_date": "2022-09-14T14:05:43+00:00",
      "revision_history": [
        {
          "date": "2022-09-14T14:05:43+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-09-14T14:05:43+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T01:37:34+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.0.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat CodeReady Linux Builder (v. 9)",
                "product": {
                  "name": "Red Hat CodeReady Linux Builder (v. 9)",
                  "product_id": "CRB-9.0.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64",
                  "product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.109-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64",
                  "product_id": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.109-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
                  "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.9-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64",
                  "product_id": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host-debuginfo@6.0.9-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
                  "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.9-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
                  "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.9-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
                  "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.109-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
                  "product_id": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.109-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
                "product": {
                  "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
                  "product_id": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.9-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
                "product": {
                  "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
                  "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.9-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64",
                  "product_id": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.9-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:6.0.9-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet-host-0:6.0.9-1.el9_0.aarch64",
                  "product_id": "dotnet-host-0:6.0.9-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@6.0.9-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64",
                  "product_id": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.9-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
                  "product_id": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.9-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64",
                  "product_id": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.109-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
                  "product_id": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.9-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64",
                "product": {
                  "name": "dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64",
                  "product_id": "dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.109-1.el9_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64",
                "product": {
                  "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64",
                  "product_id": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@6.0.109-1.el9_0?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64",
                  "product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.109-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64",
                  "product_id": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.109-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
                  "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.9-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64",
                  "product_id": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host-debuginfo@6.0.9-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
                  "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.9-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
                  "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.9-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
                  "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.109-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
                  "product_id": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.109-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
                "product": {
                  "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
                  "product_id": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.9-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
                "product": {
                  "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
                  "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.9-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64",
                  "product_id": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.9-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:6.0.9-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet-host-0:6.0.9-1.el9_0.x86_64",
                  "product_id": "dotnet-host-0:6.0.9-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@6.0.9-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64",
                  "product_id": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.9-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
                  "product_id": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.9-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64",
                  "product_id": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.109-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
                  "product_id": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.9-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64",
                "product": {
                  "name": "dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64",
                  "product_id": "dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.109-1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64",
                "product": {
                  "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64",
                  "product_id": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@6.0.109-1.el9_0?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x",
                "product": {
                  "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x",
                  "product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.109-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x",
                "product": {
                  "name": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x",
                  "product_id": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.109-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
                  "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.9-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x",
                "product": {
                  "name": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x",
                  "product_id": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host-debuginfo@6.0.9-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
                "product": {
                  "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
                  "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.9-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
                "product": {
                  "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
                  "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.9-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
                "product": {
                  "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
                  "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.109-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
                "product": {
                  "name": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
                  "product_id": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.109-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x",
                "product": {
                  "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x",
                  "product_id": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.9-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
                "product": {
                  "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
                  "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.9-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x",
                  "product_id": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.9-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:6.0.9-1.el9_0.s390x",
                "product": {
                  "name": "dotnet-host-0:6.0.9-1.el9_0.s390x",
                  "product_id": "dotnet-host-0:6.0.9-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@6.0.9-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x",
                "product": {
                  "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x",
                  "product_id": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.9-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x",
                "product": {
                  "name": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x",
                  "product_id": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.9-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x",
                "product": {
                  "name": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x",
                  "product_id": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.109-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
                "product": {
                  "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
                  "product_id": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.9-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x",
                "product": {
                  "name": "dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x",
                  "product_id": "dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.109-1.el9_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x",
                "product": {
                  "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x",
                  "product_id": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@6.0.109-1.el9_0?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet6.0-0:6.0.109-1.el9_0.src",
                "product": {
                  "name": "dotnet6.0-0:6.0.109-1.el9_0.src",
                  "product_id": "dotnet6.0-0:6.0.109-1.el9_0.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0@6.0.109-1.el9_0?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-host-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.9-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-host-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-host-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-0:6.0.109-1.el9_0.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el9_0.src"
        },
        "product_reference": "dotnet6.0-0:6.0.109-1.el9_0.src",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-host-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.9-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-host-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-host-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-0:6.0.109-1.el9_0.src as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el9_0.src"
        },
        "product_reference": "dotnet6.0-0:6.0.109-1.el9_0.src",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64",
        "relates_to_product_reference": "CRB-9.0.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-38013",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2022-09-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2125124"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": ".NET Core and Visual Studio Denial of Service Vulnerability",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el9_0.src",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64",
          "AppStream-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64",
          "AppStream-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x",
          "AppStream-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el9_0.src",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64",
          "CRB-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64",
          "CRB-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x",
          "CRB-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-38013"
        },
        {
          "category": "external",
          "summary": "RHBZ#2125124",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2125124"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-38013",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-38013"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38013"
        }
      ],
      "release_date": "2022-09-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-14T14:05:43+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el9_0.src",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el9_0.src",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6521"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el9_0.src",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64",
            "AppStream-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64",
            "AppStream-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x",
            "AppStream-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el9_0.src",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el9_0.x86_64",
            "CRB-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.aarch64",
            "CRB-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.s390x",
            "CRB-9.0.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion."
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET 6.0 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.109 and .NET Runtime 6.0.9.\n\nSecurity Fix(es):\n\n* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:6539",
        "url": "https://access.redhat.com/errata/RHSA-2022:6539"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2125124",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2125124"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6539.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET 6.0 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T01:38:22+00:00",
      "generator": {
        "date": "2024-11-06T01:38:22+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:6539",
      "initial_release_date": "2022-09-15T08:07:55+00:00",
      "revision_history": [
        {
          "date": "2022-09-15T08:07:55+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-09-15T08:07:55+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T01:38:22+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.6.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CRB (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux CRB (v. 8)",
                  "product_id": "CRB-8.6.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
                "product": {
                  "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
                  "product_id": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.9-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
                "product": {
                  "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
                  "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.9-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-0:6.0.109-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet-0:6.0.109-1.el8_6.aarch64",
                  "product_id": "dotnet-0:6.0.109-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet@6.0.109-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64",
                  "product_id": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.9-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:6.0.9-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet-host-0:6.0.9-1.el8_6.aarch64",
                  "product_id": "dotnet-host-0:6.0.9-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@6.0.9-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64",
                  "product_id": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.9-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
                  "product_id": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.9-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64",
                  "product_id": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.109-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
                  "product_id": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.9-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64",
                  "product_id": "dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.109-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64",
                "product": {
                  "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64",
                  "product_id": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@6.0.109-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64",
                  "product_id": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.109-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
                  "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.9-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64",
                  "product_id": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host-debuginfo@6.0.9-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
                  "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.9-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
                  "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.9-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
                  "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.109-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
                  "product_id": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.109-1.el8_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64",
                "product": {
                  "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64",
                  "product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.109-1.el8_6?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
                "product": {
                  "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
                  "product_id": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.9-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
                "product": {
                  "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
                  "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.9-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-0:6.0.109-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-0:6.0.109-1.el8_6.x86_64",
                  "product_id": "dotnet-0:6.0.109-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet@6.0.109-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64",
                  "product_id": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.9-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:6.0.9-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-host-0:6.0.9-1.el8_6.x86_64",
                  "product_id": "dotnet-host-0:6.0.9-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@6.0.9-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64",
                  "product_id": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.9-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
                  "product_id": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.9-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64",
                  "product_id": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.109-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
                  "product_id": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.9-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64",
                  "product_id": "dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.109-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64",
                "product": {
                  "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64",
                  "product_id": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@6.0.109-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64",
                  "product_id": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.109-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
                  "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.9-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64",
                  "product_id": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host-debuginfo@6.0.9-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
                  "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.9-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
                  "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.9-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
                  "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.109-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
                  "product_id": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.109-1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64",
                "product": {
                  "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64",
                  "product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.109-1.el8_6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x",
                "product": {
                  "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x",
                  "product_id": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.9-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
                "product": {
                  "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
                  "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.9-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-0:6.0.109-1.el8_6.s390x",
                "product": {
                  "name": "dotnet-0:6.0.109-1.el8_6.s390x",
                  "product_id": "dotnet-0:6.0.109-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet@6.0.109-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x",
                  "product_id": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.9-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:6.0.9-1.el8_6.s390x",
                "product": {
                  "name": "dotnet-host-0:6.0.9-1.el8_6.s390x",
                  "product_id": "dotnet-host-0:6.0.9-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@6.0.9-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x",
                "product": {
                  "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x",
                  "product_id": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.9-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x",
                "product": {
                  "name": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x",
                  "product_id": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.9-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x",
                "product": {
                  "name": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x",
                  "product_id": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.109-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
                "product": {
                  "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
                  "product_id": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.9-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x",
                "product": {
                  "name": "dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x",
                  "product_id": "dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.109-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x",
                "product": {
                  "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x",
                  "product_id": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@6.0.109-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x",
                "product": {
                  "name": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x",
                  "product_id": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.109-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
                  "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.9-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x",
                "product": {
                  "name": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x",
                  "product_id": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host-debuginfo@6.0.9-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
                "product": {
                  "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
                  "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.9-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
                "product": {
                  "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
                  "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.9-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
                "product": {
                  "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
                  "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.109-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
                "product": {
                  "name": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
                  "product_id": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.109-1.el8_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x",
                "product": {
                  "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x",
                  "product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.109-1.el8_6?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet6.0-0:6.0.109-1.el8_6.src",
                "product": {
                  "name": "dotnet6.0-0:6.0.109-1.el8_6.src",
                  "product_id": "dotnet6.0-0:6.0.109-1.el8_6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0@6.0.109-1.el8_6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "dotnet-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-host-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-host-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-host-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-0:6.0.109-1.el8_6.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el8_6.src"
        },
        "product_reference": "dotnet6.0-0:6.0.109-1.el8_6.src",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "dotnet-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-host-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-host-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-host-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-0:6.0.109-1.el8_6.src as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el8_6.src"
        },
        "product_reference": "dotnet6.0-0:6.0.109-1.el8_6.src",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64",
        "relates_to_product_reference": "CRB-8.6.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-38013",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2022-09-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2125124"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": ".NET Core and Visual Studio Denial of Service Vulnerability",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el8_6.src",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64",
          "AppStream-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64",
          "AppStream-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x",
          "AppStream-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el8_6.src",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64",
          "CRB-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64",
          "CRB-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x",
          "CRB-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-38013"
        },
        {
          "category": "external",
          "summary": "RHBZ#2125124",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2125124"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-38013",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-38013"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38013"
        }
      ],
      "release_date": "2022-09-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-15T08:07:55+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el8_6.src",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el8_6.src",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6539"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el8_6.src",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64",
            "AppStream-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64",
            "AppStream-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x",
            "AppStream-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:aspnetcore-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-apphost-pack-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-hostfxr-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-runtime-6.0-debuginfo-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-targeting-pack-6.0-0:6.0.9-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet-templates-6.0-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-0:6.0.109-1.el8_6.src",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debuginfo-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:dotnet6.0-debugsource-0:6.0.109-1.el8_6.x86_64",
            "CRB-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.aarch64",
            "CRB-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.s390x",
            "CRB-8.6.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:6.0.109-1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion."
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET 6.0 is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.109 and .NET Runtime 6.0.9.\n\nSecurity Fix(es):\n\n* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:6520",
        "url": "https://access.redhat.com/errata/RHSA-2022:6520"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2125124",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2125124"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6520.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET 6.0 on RHEL 7 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T01:37:43+00:00",
      "generator": {
        "date": "2024-11-06T01:37:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:6520",
      "initial_release_date": "2022-09-14T13:41:37+00:00",
      "revision_history": [
        {
          "date": "2022-09-14T13:41:37+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-09-14T13:41:37+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T01:37:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                  "product_id": "7ComputeNode-dotNET-6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:6.0::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-dotNET-6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:6.0::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-dotNET-6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:6.0::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": ".NET Core on Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
                  "product_id": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-aspnetcore-runtime-6.0@6.0.9-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
                  "product_id": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-aspnetcore-targeting-pack-6.0@6.0.9-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet@6.0.109-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-apphost-pack-6.0@6.0.9-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-host@6.0.9-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-hostfxr-6.0@6.0.9-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-runtime-6.0@6.0.9-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-sdk-6.0@6.0.109-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts@6.0.109-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-targeting-pack-6.0@6.0.9-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-templates-6.0@6.0.109-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64",
                  "product_id": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-netstandard-targeting-pack-2.1@6.0.109-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-debuginfo@6.0.109-1.el7_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
                "product": {
                  "name": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
                  "product_id": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet@6.0.109-1.el7_9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-38013",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2022-09-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2125124"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": ".NET Core and Visual Studio Denial of Service Vulnerability",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-38013"
        },
        {
          "category": "external",
          "summary": "RHBZ#2125124",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2125124"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-38013",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-38013"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38013"
        }
      ],
      "release_date": "2022-09-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-14T13:41:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6520"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.src",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.109-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.109-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.9-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.109-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.109-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.9-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.109-1.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.109-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion."
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2022-38013",
    "description": ".NET Core and Visual Studio Denial of Service Vulnerability.",
    "id": "GSD-2022-38013",
    "references": [
      "https://access.redhat.com/errata/RHSA-2022:6520",
      "https://access.redhat.com/errata/RHSA-2022:6521",
      "https://access.redhat.com/errata/RHSA-2022:6522",
      "https://access.redhat.com/errata/RHSA-2022:6523",
      "https://access.redhat.com/errata/RHSA-2022:6539"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-38013"
      ],
      "details": ".NET Core and Visual Studio Denial of Service Vulnerability.",
      "id": "GSD-2022-38013",
      "modified": "2023-12-13T01:19:22.341031Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@microsoft.com",
        "ID": "CVE-2022-38013",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Visual Studio 2022 for Mac version 17.3",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "17.3",
                          "version_value": "17.3.5"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2022 version 17.3",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "17.0.0",
                          "version_value": "17.3.4"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": ".NET Core 3.1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "3.1",
                          "version_value": "3.1.29"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": ".NET 6.0",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.0.0",
                          "version_value": "6.0.9"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "16.11.0",
                          "version_value": "16.11.19"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "15.0.0",
                          "version_value": "16.9.25"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2022 version 17.0",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "17.0.0",
                          "version_value": "17.0.14"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2022 version 17.2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "17.2.0",
                          "version_value": "17.2.8"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Microsoft"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": ".NET Core and Visual Studio Denial of Service Vulnerability"
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Denial of Service"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013",
            "refsource": "MISC",
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE/"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M/"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y/"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG/"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY/"
          }
        ]
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "[3.1.0,3.1.29),[5.0.0,6.0.9)",
          "affected_versions": "All versions starting from 3.1.0 before 3.1.29, all versions starting from 5.0.0 before 6.0.9",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-09-15",
          "description": ".NET Core and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.29",
            "6.0.9"
          ],
          "identifier": "CVE-2022-38013",
          "identifiers": [
            "GHSA-r8m2-4x37-6592",
            "CVE-2022-38013"
          ],
          "not_impacted": "All versions before 3.1.0, all versions starting from 3.1.29 before 5.0.0, all versions starting from 6.0.9",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-arm",
          "pubdate": "2022-09-15",
          "solution": "Upgrade to versions 3.1.29, 6.0.9 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013",
            "https://github.com/advisories/GHSA-r8m2-4x37-6592"
          ],
          "uuid": "4f9bbc49-2980-4eb3-b929-a94de4052232"
        },
        {
          "affected_range": "[3.1.0,3.1.29),[5.0.0,6.0.9)",
          "affected_versions": "All versions starting from 3.1.0 before 3.1.29, all versions starting from 5.0.0 before 6.0.9",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-09-15",
          "description": ".NET Core and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.29",
            "6.0.9"
          ],
          "identifier": "CVE-2022-38013",
          "identifiers": [
            "GHSA-r8m2-4x37-6592",
            "CVE-2022-38013"
          ],
          "not_impacted": "All versions before 3.1.0, all versions starting from 3.1.29 before 5.0.0, all versions starting from 6.0.9",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64",
          "pubdate": "2022-09-15",
          "solution": "Upgrade to versions 3.1.29, 6.0.9 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013",
            "https://github.com/advisories/GHSA-r8m2-4x37-6592"
          ],
          "uuid": "fb874ede-4f9d-4fc4-ae62-42de5828e751"
        },
        {
          "affected_range": "[5.0.0,6.0.9)",
          "affected_versions": "All versions starting from 5.0.0 before 6.0.9",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-09-15",
          "description": ".NET Core and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "6.0.9"
          ],
          "identifier": "CVE-2022-38013",
          "identifiers": [
            "GHSA-r8m2-4x37-6592",
            "CVE-2022-38013"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 6.0.9",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm",
          "pubdate": "2022-09-15",
          "solution": "Upgrade to version 6.0.9 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013",
            "https://github.com/advisories/GHSA-r8m2-4x37-6592"
          ],
          "uuid": "ac0e2d76-4f39-43ce-8499-b8114256c5c7"
        },
        {
          "affected_range": "[3.1.0,3.1.29),[5.0.0,6.0.9)",
          "affected_versions": "All versions starting from 3.1.0 before 3.1.29, all versions starting from 5.0.0 before 6.0.9",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-09-15",
          "description": ".NET Core and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.29",
            "6.0.9"
          ],
          "identifier": "CVE-2022-38013",
          "identifiers": [
            "GHSA-r8m2-4x37-6592",
            "CVE-2022-38013"
          ],
          "not_impacted": "All versions before 3.1.0, all versions starting from 3.1.29 before 5.0.0, all versions starting from 6.0.9",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64",
          "pubdate": "2022-09-15",
          "solution": "Upgrade to versions 3.1.29, 6.0.9 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013",
            "https://github.com/advisories/GHSA-r8m2-4x37-6592"
          ],
          "uuid": "677441e6-a9e2-4e7b-8b6f-96dd40c108ac"
        },
        {
          "affected_range": "[3.1.0,3.1.29),[5.0.0,6.0.9)",
          "affected_versions": "All versions starting from 3.1.0 before 3.1.29, all versions starting from 5.0.0 before 6.0.9",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-09-15",
          "description": ".NET Core and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.29",
            "6.0.9"
          ],
          "identifier": "CVE-2022-38013",
          "identifiers": [
            "GHSA-r8m2-4x37-6592",
            "CVE-2022-38013"
          ],
          "not_impacted": "All versions before 3.1.0, all versions starting from 3.1.29 before 5.0.0, all versions starting from 6.0.9",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64",
          "pubdate": "2022-09-15",
          "solution": "Upgrade to versions 3.1.29, 6.0.9 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013",
            "https://github.com/advisories/GHSA-r8m2-4x37-6592"
          ],
          "uuid": "df5c5eed-6321-44db-b671-9263b3c6d7d2"
        },
        {
          "affected_range": "[3.1.0,3.1.29),[5.0.0,6.0.9)",
          "affected_versions": "All versions starting from 3.1.0 before 3.1.29, all versions starting from 5.0.0 before 6.0.9",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-09-15",
          "description": ".NET Core and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.29",
            "6.0.9"
          ],
          "identifier": "CVE-2022-38013",
          "identifiers": [
            "GHSA-r8m2-4x37-6592",
            "CVE-2022-38013"
          ],
          "not_impacted": "All versions before 3.1.0, all versions starting from 3.1.29 before 5.0.0, all versions starting from 6.0.9",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-x64",
          "pubdate": "2022-09-15",
          "solution": "Upgrade to versions 3.1.29, 6.0.9 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013",
            "https://github.com/advisories/GHSA-r8m2-4x37-6592"
          ],
          "uuid": "23d5db77-b2c3-489a-88ff-a0beb7a13087"
        },
        {
          "affected_range": "[5.0.0,6.0.9)",
          "affected_versions": "All versions starting from 5.0.0 before 6.0.9",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-09-15",
          "description": ".NET Core and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "6.0.9"
          ],
          "identifier": "CVE-2022-38013",
          "identifiers": [
            "GHSA-r8m2-4x37-6592",
            "CVE-2022-38013"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 6.0.9",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64",
          "pubdate": "2022-09-15",
          "solution": "Upgrade to version 6.0.9 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013",
            "https://github.com/advisories/GHSA-r8m2-4x37-6592"
          ],
          "uuid": "59b63adf-60b0-4ef4-8c27-ae1c2eb2bf51"
        },
        {
          "affected_range": "[3.1.0,3.1.29),[5.0.0,6.0.9)",
          "affected_versions": "All versions starting from 3.1.0 before 3.1.29, all versions starting from 5.0.0 before 6.0.9",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-09-15",
          "description": ".NET Core and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.29",
            "6.0.9"
          ],
          "identifier": "CVE-2022-38013",
          "identifiers": [
            "GHSA-r8m2-4x37-6592",
            "CVE-2022-38013"
          ],
          "not_impacted": "All versions before 3.1.0, all versions starting from 3.1.29 before 5.0.0, all versions starting from 6.0.9",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.osx-x64",
          "pubdate": "2022-09-15",
          "solution": "Upgrade to versions 3.1.29, 6.0.9 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013",
            "https://github.com/advisories/GHSA-r8m2-4x37-6592"
          ],
          "uuid": "e7b0225e-fa70-4280-b1b0-1bf1ebbcd639"
        },
        {
          "affected_range": "[3.1.0,3.1.29),[5.0.0,6.0.9)",
          "affected_versions": "All versions starting from 3.1.0 before 3.1.29, all versions starting from 5.0.0 before 6.0.9",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-09-15",
          "description": ".NET Core and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.29",
            "6.0.9"
          ],
          "identifier": "CVE-2022-38013",
          "identifiers": [
            "GHSA-r8m2-4x37-6592",
            "CVE-2022-38013"
          ],
          "not_impacted": "All versions before 3.1.0, all versions starting from 3.1.29 before 5.0.0, all versions starting from 6.0.9",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.win-arm",
          "pubdate": "2022-09-15",
          "solution": "Upgrade to versions 3.1.29, 6.0.9 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013",
            "https://github.com/advisories/GHSA-r8m2-4x37-6592"
          ],
          "uuid": "5b42d143-457b-4569-a7d6-1a7ff0ec6b43"
        },
        {
          "affected_range": "[3.1.0,3.1.29),[5.0.0,6.0.9)",
          "affected_versions": "All versions starting from 3.1.0 before 3.1.29, all versions starting from 5.0.0 before 6.0.9",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-09-15",
          "description": ".NET Core and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.29",
            "6.0.9"
          ],
          "identifier": "CVE-2022-38013",
          "identifiers": [
            "GHSA-r8m2-4x37-6592",
            "CVE-2022-38013"
          ],
          "not_impacted": "All versions before 3.1.0, all versions starting from 3.1.29 before 5.0.0, all versions starting from 6.0.9",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.win-arm64",
          "pubdate": "2022-09-15",
          "solution": "Upgrade to versions 3.1.29, 6.0.9 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013",
            "https://github.com/advisories/GHSA-r8m2-4x37-6592"
          ],
          "uuid": "c7f7e98b-a0b0-47f2-8657-e03d018c6f08"
        },
        {
          "affected_range": "[3.1.0,3.1.29),[5.0.0,6.0.9)",
          "affected_versions": "All versions starting from 3.1.0 before 3.1.29, all versions starting from 5.0.0 before 6.0.9",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-09-15",
          "description": ".NET Core and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.29",
            "6.0.9"
          ],
          "identifier": "CVE-2022-38013",
          "identifiers": [
            "GHSA-r8m2-4x37-6592",
            "CVE-2022-38013"
          ],
          "not_impacted": "All versions before 3.1.0, all versions starting from 3.1.29 before 5.0.0, all versions starting from 6.0.9",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.win-x64",
          "pubdate": "2022-09-15",
          "solution": "Upgrade to versions 3.1.29, 6.0.9 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013",
            "https://github.com/advisories/GHSA-r8m2-4x37-6592"
          ],
          "uuid": "6dddab3c-bdff-45fe-b8ef-25a5506047b8"
        },
        {
          "affected_range": "[3.1.0,3.1.29),[5.0.0,6.0.9)",
          "affected_versions": "All versions starting from 3.1.0 before 3.1.29, all versions starting from 5.0.0 before 6.0.9",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-09-15",
          "description": ".NET Core and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.29",
            "6.0.9"
          ],
          "identifier": "CVE-2022-38013",
          "identifiers": [
            "GHSA-r8m2-4x37-6592",
            "CVE-2022-38013"
          ],
          "not_impacted": "All versions before 3.1.0, all versions starting from 3.1.29 before 5.0.0, all versions starting from 6.0.9",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.win-x86",
          "pubdate": "2022-09-15",
          "solution": "Upgrade to versions 3.1.29, 6.0.9 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013",
            "https://github.com/advisories/GHSA-r8m2-4x37-6592"
          ],
          "uuid": "4756ed2d-68e2-4c5a-8f49-7497019e551c"
        },
        {
          "affected_range": "[6.0.0]",
          "affected_versions": "Version 6.0.0",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-12-07",
          "description": ".NET Core and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [],
          "identifier": "CVE-2022-38013",
          "identifiers": [
            "CVE-2022-38013"
          ],
          "not_impacted": "",
          "package_slug": "nuget/System.Text.Encodings.Web",
          "pubdate": "2022-09-13",
          "solution": "Unfortunately, there is no solution available yet.",
          "title": "Uncontrolled Resource Consumption",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2022-38013",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013"
          ],
          "uuid": "f4523e68-1f4c-488c-abca-ae8005257a7c"
        }
      ]
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:6.0.0:-:*:*:*:*:*:*",
                    "matchCriteriaId": "1DE0C8DD-9C73-4876-8193-068F18074B58",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net_core:3.1:-:*:*:*:*:*:*",
                    "matchCriteriaId": "70BE107E-20A0-4998-A8ED-BCC414C6BDBF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:16.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DF6CF9B0-D279-42CD-A84D-48327F44422D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:16.11:*:*:*:*:*:*:*",
                    "matchCriteriaId": "99E7DAC9-17EF-40D4-AEEC-C24970B7190F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:17.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3393F97F-05CD-4B04-A6E1-3D914652C4E5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:17.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AB70FC91-06DB-4E92-9C0B-6FDE078F911B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:17.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6C0E9FAF-2CDC-42E4-B2BB-44E6136E3D22",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:17.3:*:*:*:*:mac:*:*",
                    "matchCriteriaId": "EEAB6255-1A4D-443D-AD81-830E3EC30CFB",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
                    "matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E30D0E6F-4AE8-4284-8716-991DFA48CC5D",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": ".NET Core and Visual Studio Denial of Service Vulnerability"
          },
          {
            "lang": "es",
            "value": "Una vulnerabilidad de Denegaci\u00f3n de Servicio en .NET Core and Visual Studio"
          }
        ],
        "id": "CVE-2022-38013",
        "lastModified": "2023-12-20T20:15:14.580",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "secure@microsoft.com",
              "type": "Primary"
            }
          ]
        },
        "published": "2022-09-13T19:15:12.867",
        "references": [
          {
            "source": "secure@microsoft.com",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY/"
          },
          {
            "source": "secure@microsoft.com",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE/"
          },
          {
            "source": "secure@microsoft.com",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y/"
          },
          {
            "source": "secure@microsoft.com",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG/"
          },
          {
            "source": "secure@microsoft.com",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M/"
          },
          {
            "source": "secure@microsoft.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013"
          }
        ],
        "sourceIdentifier": "secure@microsoft.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}