| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| Microsoft.AspNetCore.App.Runtime.linux-arm | ≥ 3.1.0, < 3.1.28≥ 6.0.0, < 6.0.8 | 3.1.286.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-arm64 | ≥ 3.1.0, < 3.1.28≥ 6.0.0, < 6.0.8 | 3.1.286.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-arm | ≥ 3.1.0, < 3.1.28≥ 6.0.0, < 6.0.8 | 3.1.286.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | ≥ 3.1.0, < 3.1.28≥ 6.0.0, < 6.0.8 | 3.1.286.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | ≥ 3.1.0, < 3.1.28≥ 6.0.0, < 6.0.8 | 3.1.286.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-x64 | ≥ 3.1.0, < 3.1.28≥ 6.0.0, < 6.0.8 | 3.1.286.0.8 |
| Microsoft.AspNetCore.App.Runtime.osx-arm64 | ≥ 6.0.0, < 6.0.8 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.osx-x64 | ≥ 3.1.0, < 3.1.28≥ 6.0.0, < 6.0.8 | 3.1.286.0.8 |
| Microsoft.AspNetCore.App.Runtime.win-arm | ≥ 3.1.0, < 3.1.28≥ 6.0.0, < 6.0.8 | 3.1.286.0.8 |
| Microsoft.AspNetCore.App.Runtime.win-arm64 | ≥ 3.1.0, < 3.1.28≥ 6.0.0, < 6.0.8 | 3.1.286.0.8 |
| Microsoft.AspNetCore.App.Runtime.win-x64 | ≥ 3.1.0, < 3.1.28≥ 6.0.0, < 6.0.8 | 3.1.286.0.8 |
| Microsoft.AspNetCore.App.Runtime.win-x86 | ≥ 3.1.0, < 3.1.28≥ 6.0.0, < 6.0.8 | 3.1.286.0.8 |
| System.Security.Cryptography.Xml | ≥ 5.0.0, < 6.0.1< 4.7.1 | 6.0.14.7.1 |
| .net | ≥ 6.0.0, < 6.0.8 | 6.0.8 |
| .net core | ≥ 3.1, < 3.1.28 | 3.1.28 |
| powershell | ≥ 7.0, < 7.0.12≥ 7.2, < 7.2.6 | 7.0.127.2.6 |
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET Core 3.1 and .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
An information disclosure vulnerability exists in .NET Core 3.1 and .NET 6.0 that could lead to unauthorized access of privileged information.
If your application uses the following package versions, ensure you update to the latest version of .NET.
| Package name | Affected version | Patched version |
|---|---|---|
| System.Security.Cryptography.Xml | <=4.7.0 | 4.7.1 |
| Microsoft.AspNetCore.App.Runtime.win-x64 | >=3.1.0, 3.1.27 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.linux-x64 | >=3.1.0, 3.1.27 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.win-x86 | >=3.1.0, 3.1.27 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.osx-x64 | >=3.1.0, 3.1.27 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | >=3.1.0, 3.1.27 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.linux-arm64 | >=3.1.0, 3.1.27 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.linux-arm |
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí| >=3.1.0, 3.1.27 |
| 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.win-arm64 | >=3.1.0, 3.1.27 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.win-arm | >=3.1.0, 3.1.27 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | >=3.1.0, 3.1.27 | 3.1.28 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-arm | >=3.1.0, 3.1.27 | 3.1.28 |
| Package name | Affected version | Patched version |
|---|---|---|
| System.Security.Cryptography.Xml | >=5.0.0, 6.0.0 | 6.0.1 |
| Microsoft.AspNetCore.App.Runtime.win-x64 | >=6.0.0, 6.0.7 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-x64 | >=6.0.0, 6.0.7 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.win-x86 | >=6.0.0, 6.0.7 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.osx-x64 | >=6.0.0, 6.0.7 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | >=6.0.0, 6.0.7 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-arm64 | >=6.0.0, 6.0.7 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-arm | >=6.0.0, 6.0.7 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.win-arm64 | >=6.0.0, 6.0.7 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.win-arm | >=6.0.0, 6.0.7 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.osx-arm64 | >=6.0.0, 6.0.7 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | >=6.0.0, 6.0.7 | 6.0.8 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-arm | >=6.0.0, 6.0.7 | 6.0.8 |
Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/232 An Issue for this can be found at https://github.com/dotnet/aspnetcore/issues/43166 MSRC details for this can be found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34716