Vulnerability-Lookup

MSRC_CVE-2022-23267

Vulnerability from csaf_microsoft - Published: 2022-05-10 08:00 - Updated: 2022-06-14 07:00

Summary

.NET and Visual Studio Denial of Service Vulnerability

Severity

Important

Notes

Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

Customer Action: Required. The vulnerability documented by this CVE requires customer action to resolve.

CVE-2022-23267

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Vendor Fix 3.1.25:Security Update:https://support.microsoft.com/help/5014326 https://support.microsoft.com/help/5014326

Vendor Fix 5.0.17:Security Update:https://support.microsoft.com/help/5014329 https://support.microsoft.com/help/5014329

Vendor Fix 16.9.21:Security Update:https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.9 https://docs.microsoft.com/en-us/visualstudio/rel…

Vendor Fix 8.10.24:Security Update:https://docs.microsoft.com/visualstudio/releasenotes/vs2019-mac-relnotes https://docs.microsoft.com/visualstudio/releaseno…

Vendor Fix 16.11.14:Security Update:https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11 https://docs.microsoft.com/en-us/visualstudio/rel…

Vendor Fix 17.0.10:Security Update:https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes https://docs.microsoft.com/en-us/visualstudio/rel…

Vendor Fix 6.0.5:Security Update:https://support.microsoft.com/help/5014330 https://support.microsoft.com/help/5014330

Vendor Fix 17.1.7:Security Update:https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes-v17.1.md https://docs.microsoft.com/en-us/visualstudio/rel…

Vendor Fix 7.0.11:Security Update:https://github.com/PowerShell/Announcements/issues/32 https://github.com/PowerShell/Announcements/issues/32

Vendor Fix 7.2.4:Security Update:https://github.com/PowerShell/Announcements/issues/32 https://github.com/PowerShell/Announcements/issues/32

Vendor Fix 17.0.3:Security Update:https://docs.microsoft.com/en-us/visualstudio/releases/2022/mac-release-notes https://docs.microsoft.com/en-us/visualstudio/rel…

References

URL

Category

	https://msrc.microsoft.com/update-guide/vulnerabi…	self
	https://msrc.microsoft.com/csaf/2022/msrc_cve-202…	self
	https://www.microsoft.com/en-us/msrc/exploitabili…	external
	https://support.microsoft.com/lifecycle	external
	https://www.first.org/cvss	external
	https://msrc.microsoft.com/update-guide/vulnerabi…	self
	https://msrc.microsoft.com/update-guide/vulnerabi…	self

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2022-23267 .NET and Visual Studio Denial of Service Vulnerability - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23267"
      },
      {
        "category": "self",
        "summary": "CVE-2022-23267 .NET and Visual Studio Denial of Service Vulnerability - CSAF",
        "url": "https://msrc.microsoft.com/csaf/2022/msrc_cve-2022-23267.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": ".NET and Visual Studio Denial of Service Vulnerability",
    "tracking": {
      "current_release_date": "2022-06-14T07:00:00.000Z",
      "generator": {
        "date": "2025-01-02T18:57:44.872Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2022-23267",
      "initial_release_date": "2022-05-10T08:00:00.000Z",
      "revision_history": [
        {
          "date": "2022-05-10T07:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2022-05-17T07:00:00.000Z",
          "legacy_version": "2",
          "number": "2",
          "summary": "Revised the Security Updates table to include PowerShell 7.0 and PowerShell 7.2 because these versions of PowerShell 7 are affected by this vulnerability. See [https://github.com/PowerShell/Announcements/issues/32](https://github.com/PowerShell/Announcements/issues/32) for more information. In addition the Security Updates table was updated to include Visual Studio 2019 version 16.11 as it is also affected by this vulnerability. Customers who have already installed the May 2022 security updates for Visual Studio 2019 version 16.11 do not need to take any further action."
        },
        {
          "date": "2022-06-14T07:00:00.000Z",
          "legacy_version": "3",
          "number": "3",
          "summary": "Revised the Security Updates table to include Visual Studio 2019 for Mac and Visual Studio 2022 for Mac because these versions of Visual Studio for Mac are affected by this vulnerability. Microsoft strongly recommends that customers running these versions of Visual Studio install the updates to be fully protected from the vulnerability."
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c3.1.25",
            "product": {
              "name": ".NET Core 3.1 \u003c3.1.25",
              "product_id": "11"
            }
          },
          {
            "category": "product_version",
            "name": "3.1.25",
            "product": {
              "name": ".NET Core 3.1 3.1.25",
              "product_id": "11730"
            }
          }
        ],
        "category": "product_name",
        "name": ".NET Core 3.1"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c5.0.17",
            "product": {
              "name": ".NET 5.0 \u003c5.0.17",
              "product_id": "9"
            }
          },
          {
            "category": "product_version",
            "name": "5.0.17",
            "product": {
              "name": ".NET 5.0 5.0.17",
              "product_id": "11761"
            }
          }
        ],
        "category": "product_name",
        "name": ".NET 5.0"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c16.9.21",
            "product": {
              "name": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) \u003c16.9.21",
              "product_id": "8"
            }
          },
          {
            "category": "product_version",
            "name": "16.9.21",
            "product": {
              "name": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) 16.9.21",
              "product_id": "11872"
            }
          }
        ],
        "category": "product_name",
        "name": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c8.10.24",
            "product": {
              "name": "Visual Studio 2019 for Mac version 8.10 \u003c8.10.24",
              "product_id": "7"
            }
          },
          {
            "category": "product_version",
            "name": "8.10.24",
            "product": {
              "name": "Visual Studio 2019 for Mac version 8.10 8.10.24",
              "product_id": "11901"
            }
          }
        ],
        "category": "product_name",
        "name": "Visual Studio 2019 for Mac version 8.10"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c16.11.14",
            "product": {
              "name": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) \u003c16.11.14",
              "product_id": "6"
            }
          },
          {
            "category": "product_version",
            "name": "16.11.14",
            "product": {
              "name": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) 16.11.14",
              "product_id": "11935"
            }
          }
        ],
        "category": "product_name",
        "name": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c17.0.10",
            "product": {
              "name": "Microsoft Visual Studio 2022 version 17.0 \u003c17.0.10",
              "product_id": "5"
            }
          },
          {
            "category": "product_version",
            "name": "17.0.10",
            "product": {
              "name": "Microsoft Visual Studio 2022 version 17.0 17.0.10",
              "product_id": "11969"
            }
          }
        ],
        "category": "product_name",
        "name": "Microsoft Visual Studio 2022 version 17.0"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.5",
            "product": {
              "name": ".NET 6.0 \u003c6.0.5",
              "product_id": "3"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.5",
            "product": {
              "name": ".NET 6.0 6.0.5",
              "product_id": "12009"
            }
          }
        ],
        "category": "product_name",
        "name": ".NET 6.0"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c17.1.7",
            "product": {
              "name": "Microsoft Visual Studio 2022 version 17.1 \u003c17.1.7",
              "product_id": "2"
            }
          },
          {
            "category": "product_version",
            "name": "17.1.7",
            "product": {
              "name": "Microsoft Visual Studio 2022 version 17.1 17.1.7",
              "product_id": "12020"
            }
          }
        ],
        "category": "product_name",
        "name": "Microsoft Visual Studio 2022 version 17.1"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c7.0.11",
            "product": {
              "name": "PowerShell 7.0 \u003c7.0.11",
              "product_id": "10"
            }
          },
          {
            "category": "product_version",
            "name": "7.0.11",
            "product": {
              "name": "PowerShell 7.0 7.0.11",
              "product_id": "11745"
            }
          }
        ],
        "category": "product_name",
        "name": "PowerShell 7.0"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c7.2.4",
            "product": {
              "name": "PowerShell 7.2 \u003c7.2.4",
              "product_id": "4"
            }
          },
          {
            "category": "product_version",
            "name": "7.2.4",
            "product": {
              "name": "PowerShell 7.2 7.2.4",
              "product_id": "11970"
            }
          }
        ],
        "category": "product_name",
        "name": "PowerShell 7.2"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c17.0.3",
            "product": {
              "name": "Visual Studio 2022 for Mac version 17.0 \u003c17.0.3",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "17.0.3",
            "product": {
              "name": "Visual Studio 2022 for Mac version 17.0 17.0.3",
              "product_id": "12052"
            }
          }
        ],
        "category": "product_name",
        "name": "Visual Studio 2022 for Mac version 17.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-23267",
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "11730",
          "11745",
          "11761",
          "11872",
          "11901",
          "11935",
          "11969",
          "11970",
          "12009",
          "12020",
          "12052"
        ],
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2022-23267 .NET and Visual Studio Denial of Service Vulnerability - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23267"
        },
        {
          "category": "self",
          "summary": "CVE-2022-23267 .NET and Visual Studio Denial of Service Vulnerability - CSAF",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23267"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T07:00:00.000Z",
          "details": "3.1.25:Security Update:https://support.microsoft.com/help/5014326",
          "product_ids": [
            "11"
          ],
          "url": "https://support.microsoft.com/help/5014326"
        },
        {
          "category": "vendor_fix",
          "date": "2022-05-10T07:00:00.000Z",
          "details": "5.0.17:Security Update:https://support.microsoft.com/help/5014329",
          "product_ids": [
            "9"
          ],
          "url": "https://support.microsoft.com/help/5014329"
        },
        {
          "category": "vendor_fix",
          "date": "2022-05-10T07:00:00.000Z",
          "details": "16.9.21:Security Update:https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.9",
          "product_ids": [
            "8"
          ],
          "url": "https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.9"
        },
        {
          "category": "vendor_fix",
          "date": "2022-05-10T07:00:00.000Z",
          "details": "8.10.24:Security Update:https://docs.microsoft.com/visualstudio/releasenotes/vs2019-mac-relnotes",
          "product_ids": [
            "7"
          ],
          "url": "https://docs.microsoft.com/visualstudio/releasenotes/vs2019-mac-relnotes"
        },
        {
          "category": "vendor_fix",
          "date": "2022-05-10T07:00:00.000Z",
          "details": "16.11.14:Security Update:https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11",
          "product_ids": [
            "6"
          ],
          "url": "https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11"
        },
        {
          "category": "vendor_fix",
          "date": "2022-05-10T07:00:00.000Z",
          "details": "17.0.10:Security Update:https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes",
          "product_ids": [
            "5"
          ],
          "url": "https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes"
        },
        {
          "category": "vendor_fix",
          "date": "2022-05-10T07:00:00.000Z",
          "details": "6.0.5:Security Update:https://support.microsoft.com/help/5014330",
          "product_ids": [
            "3"
          ],
          "url": "https://support.microsoft.com/help/5014330"
        },
        {
          "category": "vendor_fix",
          "date": "2022-05-10T07:00:00.000Z",
          "details": "17.1.7:Security Update:https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes-v17.1.md",
          "product_ids": [
            "2"
          ],
          "url": "https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes-v17.1.md"
        },
        {
          "category": "vendor_fix",
          "date": "2022-05-10T07:00:00.000Z",
          "details": "7.0.11:Security Update:https://github.com/PowerShell/Announcements/issues/32",
          "product_ids": [
            "10"
          ],
          "url": "https://github.com/PowerShell/Announcements/issues/32"
        },
        {
          "category": "vendor_fix",
          "date": "2022-05-10T07:00:00.000Z",
          "details": "7.2.4:Security Update:https://github.com/PowerShell/Announcements/issues/32",
          "product_ids": [
            "4"
          ],
          "url": "https://github.com/PowerShell/Announcements/issues/32"
        },
        {
          "category": "vendor_fix",
          "date": "2022-05-10T07:00:00.000Z",
          "details": "17.0.3:Security Update:https://docs.microsoft.com/en-us/visualstudio/releases/2022/mac-release-notes",
          "product_ids": [
            "1"
          ],
          "url": "https://docs.microsoft.com/en-us/visualstudio/releases/2022/mac-release-notes"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "environmentalsScore": 0.0,
            "exploitCodeMaturity": "UNPROVEN",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "remediationLevel": "OFFICIAL_FIX",
            "reportConfidence": "CONFIRMED",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Denial of Service"
        },
        {
          "category": "exploit_status",
          "details": "Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"
        }
      ],
      "title": ".NET and Visual Studio Denial of Service Vulnerability"
    }
  ]
}

CVE-2022-23267 (GCVE-0-2022-23267)

Vulnerability from cvelistv5 – Published: 2022-05-10 20:33 – Updated: 2025-01-02 18:57

Title

.NET and Visual Studio Denial of Service Vulnerability

Summary

.NET and Visual Studio Denial of Service Vulnerability

Severity ?

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

CWE

Denial of Service

Assigner

microsoft

References

URL

Tags

https://msrc.microsoft.com/update-guide/vulnerabi…

vendor-advisory

Impacted products

Vendor

Product

Version

Microsoft

.NET Core 3.1

Affected: 3.1 , < 3.1.25 (custom)

Microsoft	.NET 5.0	Affected: 5.0.0 , < 5.0.17 (custom)
Microsoft	Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)	Affected: 15.0.0 , < 16.9.21 (custom)
Microsoft	Visual Studio 2019 for Mac version 8.10	Affected: 8.1.0 , < 8.10.24 (custom)
Microsoft	Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	Affected: 16.11.0 , < 16.11.14 (custom)
Microsoft	Microsoft Visual Studio 2022 version 17.0	Affected: 17.0.0 , < 17.0.10 (custom)
Microsoft	.NET 6.0	Affected: 6.0.0 , < 6.0.5 (custom)
Microsoft	Microsoft Visual Studio 2022 version 17.1	Affected: 17.0.0 , < 17.1.7 (custom)
Microsoft	PowerShell 7.0	Affected: 7.0.0 , < 7.0.11 (custom)
Microsoft	PowerShell 7.2	Affected: 7.2.0 , < 7.2.4 (custom)
Microsoft	Visual Studio 2022 for Mac version 17.0	Affected: 17.0.0 , < 17.0.3 (custom)

Date Public ?

2022-05-10 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:36:20.350Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-23267"
          },
          {
            "name": "FEDORA-2022-d69fee9f38",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB/"
          },
          {
            "name": "FEDORA-2022-9a1d5ea33c",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO/"
          },
          {
            "name": "FEDORA-2022-256d559f0c",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5FPEQ6BTYRGTS6IYCDTZW6YF5HLQ3BY/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": ".NET Core 3.1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "3.1.25",
              "status": "affected",
              "version": "3.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": ".NET 5.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "5.0.17",
              "status": "affected",
              "version": "5.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.9.21",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Visual Studio 2019 for Mac version 8.10",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "8.10.24",
              "status": "affected",
              "version": "8.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.11.14",
              "status": "affected",
              "version": "16.11.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Visual Studio 2022 version 17.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.0.10",
              "status": "affected",
              "version": "17.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": ".NET 6.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.5",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Visual Studio 2022 version 17.1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.1.7",
              "status": "affected",
              "version": "17.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "PowerShell 7.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.0.11",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "PowerShell 7.2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.2.4",
              "status": "affected",
              "version": "7.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Visual Studio 2022 for Mac version 17.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.0.3",
              "status": "affected",
              "version": "17.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.1.25",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.0.17",
                  "versionStartIncluding": "5.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "16.9.21",
                  "versionStartIncluding": "15.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:macos:*:*",
                  "versionEndExcluding": "8.10.24",
                  "versionStartIncluding": "8.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "16.11.14",
                  "versionStartIncluding": "16.11.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.0.10",
                  "versionStartIncluding": "17.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.5",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.1.7",
                  "versionStartIncluding": "17.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:powershell_core:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.11",
                  "versionStartIncluding": "7.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.4",
                  "versionStartIncluding": "7.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.0.3",
                  "versionStartIncluding": "17.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2022-05-10T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": ".NET and Visual Studio Denial of Service Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Denial of Service",
              "lang": "en-US",
              "type": "Impact"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-02T18:57:48.914Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": ".NET and Visual Studio Denial of Service Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23267"
        }
      ],
      "title": ".NET and Visual Studio Denial of Service Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2022-23267",
    "datePublished": "2022-05-10T20:33:32.000Z",
    "dateReserved": "2022-01-15T00:00:00.000Z",
    "dateUpdated": "2025-01-02T18:57:48.914Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

MSRC_CVE-2022-23267

CVE-2022-23267 (GCVE-0-2022-23267)

Tags

Sightings

Nomenclature