CVE-2022-41032
Summary
| CVE | CVE-2022-41032 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-10-11 19:15:00 UTC |
| Updated | 2023-12-20 20:15:00 UTC |
| Description | NuGet Client Elevation of Privilege Vulnerability. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Fedoraproject | Fedora | 35 | All | All | All |
| Operating System | Fedoraproject | Fedora | 36 | All | All | All |
| Operating System | Fedoraproject | Fedora | 37 | All | All | All |
| Application | Microsoft | .net | 6.0.0 | - | All | All |
| Application | Microsoft | .net Core | 3.1 | - | All | All |
| Application | Microsoft | Visual Studio 2019 | All | All | All | All |
| Application | Microsoft | Visual Studio 2022 | All | All | All | All |
| Application | Microsoft | Visual Studio 2022 | All | All | All | All |
| Application | Microsoft | Visual Studio 2022 | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Update Guide - Microsoft Security Response Center | MISC | portal.msrc.microsoft.com | |
| [SECURITY] Fedora 35 Update: dotnet3.1-3.1.424-1.fc35 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 36 Update: dotnet3.1-3.1.424-1.fc36 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 37 Update: dotnet6.0-6.0.110-2.fc37 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 35 Update: dotnet3.1-3.1.424-1.fc35 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 37 Update: dotnet6.0-6.0.110-2.fc37 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 36 Update: dotnet3.1-3.1.424-1.fc36 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160139 Oracle Enterprise Linux Security Update for .net core 3.1 security and bugfix update (ELSA-2022-6912)
- 160140 Oracle Enterprise Linux Security Update for .net 6.0 security and bugfix update (ELSA-2022-6913)
- 160142 Oracle Enterprise Linux Security Update for .net 6.0 security and bugfix update (ELSA-2022-6911)
- 160257 Oracle Enterprise Linux Security Update for dotnet7.0 (ELSA-2022-7826)
- 160333 Oracle Enterprise Linux Security Update for dotnet7.0 (ELSA-2022-8434)
- 198981 Ubuntu Security Notification for .NET 6 Vulnerability (USN-5670-1)
- 240724 Red Hat Update for .net 6.0 (RHSA-2022:6913)
- 240725 Red Hat Update for .net core 3.1 (RHSA-2022:6912)
- 240726 Red Hat Update for .net 6.0 (RHSA-2022:6911)
- 240727 Red Hat Update for .net 6.0 on rhel 7 (RHSA-2022:6915)
- 240728 Red Hat Update for .net core 3.1 on rhel 7 (RHSA-2022:6914)
- 240859 Red Hat Update for dotnet7.0 security (RHSA-2022:7826)
- 240915 Red Hat Update for dotnet7.0 security (RHSA-2022:8434)
- 283237 Fedora Security Update for dotnet3.1 (FEDORA-2022-7f5f9ede26)
- 283238 Fedora Security Update for dotnet3.1 (FEDORA-2022-f9ca76e479)
- 283425 Fedora Security Update for dotnet6.0 (FEDORA-2022-2c37647a9c)
- 502541 Alpine Linux Security Update for dotnet6-build
- 502542 Alpine Linux Security Update for dotnet6-runtime
- 504683 Alpine Linux Security Update for dotnet6-build
- 504687 Alpine Linux Security Update for dotnet6-runtime
- 91949 Microsoft Visual Studio (NuGet Client) Security Update for October 2022
- 91950 Microsoft .NET (NuGet Client) Security Update for October 2022
- 940686 AlmaLinux Security Update for .NET (ALSA-2022:6912)
- 940688 AlmaLinux Security Update for .NET (ALSA-2022:6911)
- 940695 AlmaLinux Security Update for .NET (ALSA-2022:6913)
- 940742 AlmaLinux Security Update for dotnet7.0 (ALSA-2022:7826)
- 940784 AlmaLinux Security Update for dotnet7.0 (ALSA-2022:8434)
- 960344 Rocky Linux Security Update for .NET (RLSA-2022:6911)
- 960362 Rocky Linux Security Update for .NET (RLSA-2022:6912)
- 960567 Rocky Linux Security Update for .NET (RLSA-2022:6913)