{"api_version":"1","generated_at":"2026-07-23T11:23:05+00:00","cve":"CVE-2022-38013","urls":{"html":"https://cve.report/CVE-2022-38013","api":"https://cve.report/api/cve/CVE-2022-38013.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2022-38013","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-38013"},"summary":{"title":".NET Core and Visual Studio Denial of Service Vulnerability","description":".NET Core and Visual Studio Denial of Service Vulnerability","state":"PUBLISHED","assigner":"microsoft","published_at":"2022-09-13 19:15:12","updated_at":"2026-05-27 14:16:39"},"problem_types":["NVD-CWE-noinfo","CWE-400","Denial of Service","CWE-400 CWE-400 Uncontrolled Resource Consumption"],"metrics":[{"version":"3.1","source":"secure@microsoft.com","type":"Secondary","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","data":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","version":"3.1"}}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013","name":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Security Update Guide - Microsoft Security Response Center","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY/","name":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 37 Update: dotnet6.0-6.0.109-1.fc37 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y/","name":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 36 Update: dotnet6.0-6.0.109-1.fc36 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M/","name":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 35 Update: dotnet3.1-3.1.423-1.fc35 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38013","name":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38013","refsource":"secure@microsoft.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE/","name":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 36 Update: dotnet3.1-3.1.423-1.fc36 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG/","name":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 35 Update: dotnet6.0-6.0.109-1.fc35 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY/","name":"FEDORA:FEDORA-2022-13046bb867","refsource":"MITRE","tags":[],"title":"[SECURITY] Fedora 37 Update: dotnet6.0-6.0.109-1.fc37 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG/","name":"FEDORA:FEDORA-2022-34a610d9bf","refsource":"MITRE","tags":[],"title":"[SECURITY] Fedora 35 Update: dotnet6.0-6.0.109-1.fc35 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M/","name":"FEDORA:FEDORA-2022-847c67b3cd","refsource":"MITRE","tags":[],"title":"[SECURITY] Fedora 35 Update: dotnet3.1-3.1.423-1.fc35 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE/","name":"FEDORA:FEDORA-2022-980d492c98","refsource":"MITRE","tags":[],"title":"[SECURITY] Fedora 36 Update: dotnet3.1-3.1.423-1.fc36 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y/","name":"FEDORA:FEDORA-2022-d80b1d2827","refsource":"MITRE","tags":[],"title":"[SECURITY] Fedora 36 Update: dotnet6.0-6.0.109-1.fc36 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38013","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38013","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Microsoft","product":"Visual Studio 2022 for Mac version 17.3","version":"affected 17.3 17.3.5 custom","platforms":["Unknown"]},{"source":"CNA","vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.3","version":"affected 17.0.0 17.3.4 custom","platforms":["Unknown"]},{"source":"CNA","vendor":"Microsoft","product":".NET Core 3.1","version":"affected 3.1 3.1.29 custom","platforms":["Unknown"]},{"source":"CNA","vendor":"Microsoft","product":".NET 6.0","version":"affected 6.0.0 6.0.9 custom","platforms":["Unknown"]},{"source":"CNA","vendor":"Microsoft","product":"Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)","version":"affected 16.11.0 16.11.19 custom","platforms":["Unknown"]},{"source":"CNA","vendor":"Microsoft","product":"Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)","version":"affected 15.0.0 16.9.25 custom","platforms":["Unknown"]},{"source":"CNA","vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.0","version":"affected 17.0.0 17.0.14 custom","platforms":["Unknown"]},{"source":"CNA","vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.2","version":"affected 17.2.0 17.2.8 custom","platforms":["Unknown"]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2022","cve_id":"38013","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"35","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"38013","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"36","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"38013","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"37","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"38013","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":".net","cpe6":"6.0.0","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"38013","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":".net_core","cpe6":"3.1","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"38013","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"visual_studio_2019","cpe6":"16.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"38013","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"visual_studio_2019","cpe6":"16.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"38013","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"visual_studio_2022","cpe6":"17.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"38013","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"visual_studio_2022","cpe6":"17.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"38013","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"visual_studio_2022","cpe6":"17.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"38013","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"visual_studio_2022","cpe6":"17.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"mac","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2022","cve_id":"38013","cve":"CVE-2022-38013","epss":"0.014870000","percentile":"0.813390000","score_date":"2026-05-31","updated_at":"2026-06-01 00:08:20"},"legacy_qids":[{"cve":"CVE-2022-38013","qid":"160088","title":"Oracle Enterprise Linux Security Update for .net 6.0 security and bugfix update (ELSA-2022-6521)"},{"cve":"CVE-2022-38013","qid":"160093","title":"Oracle Enterprise Linux Security Update for .net core 3.1 security and bugfix update (ELSA-2022-6523)"},{"cve":"CVE-2022-38013","qid":"160097","title":"Oracle Enterprise Linux Security Update for .net 6.0 security and bugfix update (ELSA-2022-6539)"},{"cve":"CVE-2022-38013","qid":"198934","title":"Ubuntu Security Notification for .NET 6 Vulnerability (USN-5609-1)"},{"cve":"CVE-2022-38013","qid":"240667","title":"Red Hat Update for .net 6.0 on rhel 7 (RHSA-2022:6520)"},{"cve":"CVE-2022-38013","qid":"240668","title":"Red Hat Update for .net core 3.1 on rhel 7 (RHSA-2022:6522)"},{"cve":"CVE-2022-38013","qid":"240669","title":"Red Hat Update for .net core 3.1 (RHSA-2022:6523)"},{"cve":"CVE-2022-38013","qid":"240670","title":"Red Hat Update for .net 6.0 (RHSA-2022:6521)"},{"cve":"CVE-2022-38013","qid":"240673","title":"Red Hat Update for .net 6.0 (RHSA-2022:6539)"},{"cve":"CVE-2022-38013","qid":"283193","title":"Fedora Security Update for dotnet3.1 (FEDORA-2022-847c67b3cd)"},{"cve":"CVE-2022-38013","qid":"283194","title":"Fedora Security Update for dotnet3.1 (FEDORA-2022-980d492c98)"},{"cve":"CVE-2022-38013","qid":"283255","title":"Fedora Security Update for dotnet6.0 (FEDORA-2022-34a610d9bf)"},{"cve":"CVE-2022-38013","qid":"283256","title":"Fedora Security Update for dotnet6.0 (FEDORA-2022-d80b1d2827)"},{"cve":"CVE-2022-38013","qid":"283468","title":"Fedora Security Update for dotnet6.0 (FEDORA-2022-13046bb867)"},{"cve":"CVE-2022-38013","qid":"354460","title":"Amazon Linux Security Advisory for dotnet6.0 : ALAS2022-2022-253"},{"cve":"CVE-2022-38013","qid":"354536","title":"Amazon Linux Security Advisory for dotnet6.0 : ALAS-2022-253"},{"cve":"CVE-2022-38013","qid":"355195","title":"Amazon Linux Security Advisory for dotnet6.0 : ALAS2023-2023-092"},{"cve":"CVE-2022-38013","qid":"502540","title":"Alpine Linux Security Update for dotnet6-build"},{"cve":"CVE-2022-38013","qid":"502545","title":"Alpine Linux Security Update for dotnet6-runtime"},{"cve":"CVE-2022-38013","qid":"504682","title":"Alpine Linux Security Update for dotnet6-build"},{"cve":"CVE-2022-38013","qid":"504693","title":"Alpine Linux Security Update for dotnet6-runtime"},{"cve":"CVE-2022-38013","qid":"91938","title":"Microsoft Visual Studio Security Update for September 2022"},{"cve":"CVE-2022-38013","qid":"91941","title":"Microsoft .NET Security Update for September 2022"},{"cve":"CVE-2022-38013","qid":"940669","title":"AlmaLinux Security Update for .NET (ALSA-2022:6523)"},{"cve":"CVE-2022-38013","qid":"940674","title":"AlmaLinux Security Update for .NET (ALSA-2022:6539)"},{"cve":"CVE-2022-38013","qid":"940680","title":"AlmaLinux Security Update for .NET (ALSA-2022:6521)"},{"cve":"CVE-2022-38013","qid":"960415","title":"Rocky Linux Security Update for .NET (RLSA-2022:6523)"},{"cve":"CVE-2022-38013","qid":"960446","title":"Rocky Linux Security Update for .NET (RLSA-2022:6539)"}]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-03T10:37:42.606Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_transferred"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013"},{"name":"FEDORA-2022-980d492c98","tags":["vendor-advisory","x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE/"},{"name":"FEDORA-2022-847c67b3cd","tags":["vendor-advisory","x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M/"},{"name":"FEDORA-2022-d80b1d2827","tags":["vendor-advisory","x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y/"},{"name":"FEDORA-2022-34a610d9bf","tags":["vendor-advisory","x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG/"},{"name":"FEDORA-2022-13046bb867","tags":["vendor-advisory","x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY/"}],"title":"CVE Program Container"},{"metrics":[{"other":{"content":{"id":"CVE-2022-38013","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-08-15T14:39:58.759103Z","version":"2.0.3"},"type":"ssvc"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","description":"CWE-400 Uncontrolled Resource Consumption","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-05-27T13:49:37.761Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"platforms":["Unknown"],"product":"Visual Studio 2022 for Mac version 17.3","vendor":"Microsoft","versions":[{"lessThan":"17.3.5","status":"affected","version":"17.3","versionType":"custom"}]},{"platforms":["Unknown"],"product":"Microsoft Visual Studio 2022 version 17.3","vendor":"Microsoft","versions":[{"lessThan":"17.3.4","status":"affected","version":"17.0.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":".NET Core 3.1","vendor":"Microsoft","versions":[{"lessThan":"3.1.29","status":"affected","version":"3.1","versionType":"custom"}]},{"platforms":["Unknown"],"product":".NET 6.0","vendor":"Microsoft","versions":[{"lessThan":"6.0.9","status":"affected","version":"6.0.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)","vendor":"Microsoft","versions":[{"lessThan":"16.11.19","status":"affected","version":"16.11.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)","vendor":"Microsoft","versions":[{"lessThan":"16.9.25","status":"affected","version":"15.0.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"Microsoft Visual Studio 2022 version 17.0","vendor":"Microsoft","versions":[{"lessThan":"17.0.14","status":"affected","version":"17.0.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"Microsoft Visual Studio 2022 version 17.2","vendor":"Microsoft","versions":[{"lessThan":"17.2.8","status":"affected","version":"17.2.0","versionType":"custom"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:macos:*:*","versionEndExcluding":"17.3.5","versionStartIncluding":"17.3","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionEndExcluding":"17.3.4","versionStartIncluding":"17.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1.29","versionStartIncluding":"3.1","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.9","versionStartIncluding":"6.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*","versionEndExcluding":"16.11.19","versionStartIncluding":"16.11.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*","versionEndExcluding":"16.9.25","versionStartIncluding":"15.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.14","versionStartIncluding":"17.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionEndExcluding":"17.2.8","versionStartIncluding":"17.2.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"datePublic":"2022-09-13T07:00:00.000Z","descriptions":[{"lang":"en-US","value":".NET Core and Visual Studio Denial of Service Vulnerability"}],"metrics":[{"cvssV3_1":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"description":"Denial of Service","lang":"en-US","type":"Impact"}]}],"providerMetadata":{"dateUpdated":"2025-03-11T16:10:17.149Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":".NET Core and Visual Studio Denial of Service Vulnerability","tags":["vendor-advisory"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38013"}],"title":".NET Core and Visual Studio Denial of Service Vulnerability"}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2022-38013","datePublished":"2022-09-13T00:00:00.000Z","dateReserved":"2022-08-08T00:00:00.000Z","dateUpdated":"2026-05-27T13:49:37.761Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2022-09-13 19:15:12","lastModifiedDate":"2026-05-27 14:16:39","problem_types":["NVD-CWE-noinfo","CWE-400","Denial of Service","CWE-400 CWE-400 Uncontrolled Resource Consumption"],"metrics":{"cvssMetricV31":[{"source":"secure@microsoft.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:6.0.0:-:*:*:*:*:*:*","matchCriteriaId":"1DE0C8DD-9C73-4876-8193-068F18074B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_core:3.1:-:*:*:*:*:*:*","matchCriteriaId":"70BE107E-20A0-4998-A8ED-BCC414C6BDBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2019:16.9:*:*:*:*:*:*:*","matchCriteriaId":"DF6CF9B0-D279-42CD-A84D-48327F44422D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2019:16.11:*:*:*:*:*:*:*","matchCriteriaId":"99E7DAC9-17EF-40D4-AEEC-C24970B7190F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:17.0:*:*:*:*:*:*:*","matchCriteriaId":"3393F97F-05CD-4B04-A6E1-3D914652C4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:17.2:*:*:*:*:*:*:*","matchCriteriaId":"AB70FC91-06DB-4E92-9C0B-6FDE078F911B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:17.3:*:*:*:*:*:*:*","matchCriteriaId":"6C0E9FAF-2CDC-42E4-B2BB-44E6136E3D22"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:17.3:*:*:*:*:mac:*:*","matchCriteriaId":"EEAB6255-1A4D-443D-AD81-830E3EC30CFB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*","matchCriteriaId":"80E516C0-98A4-4ADE-B69F-66A772E2BAAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","matchCriteriaId":"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*","matchCriteriaId":"E30D0E6F-4AE8-4284-8716-991DFA48CC5D"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2022","CveId":"38013","Ordinal":"1","Title":".NET Core and Visual Studio Denial of Service Vulnerability","CVE":"CVE-2022-38013","Year":"2022"},"notes":[{"CveYear":"2022","CveId":"38013","Ordinal":"1","NoteData":".NET Core and Visual Studio Denial of Service Vulnerability","Type":"Description","Title":".NET Core and Visual Studio Denial of Service Vulnerability"}]}}}