QID 91904

Date Published: 2022-05-11

QID 91904: Microsoft .NET Framework Denial of Service (DoS) Vulnerability for May 2022

A denial of service vulnerability exist in Microsoft .Net Framework.

Following KBs are covered in this detection:
KB5013624
KB5013625
KB5013627
KB5013628
KB5013630
KB5013837
KB5013838
KB5013839
KB5013840
KB5013868
KB5013870
KB5013871
KB5013872
KB5013873
KB5013952

This security update is rated Important for supported versions of Microsoft .NET Framework.

.NET Framework 2.0, 3.0, 3.5, 3.5.1, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 and 4.8

QID Detection Logic (Authenticated):
- Checks for vulnerable version of Mscorlib.dll for .Net Framework

Successful exploitation allows attacker to cause denial of service vulnerability.

CVSS V3 rated as Medium - 3.3 severity.

CVSS V2 rated as Low - 2.1 severity.

Solution

Customers are advised to refer to CVE-2022-30130 for more details pertaining to this vulnerability.

Vendor References

KB5013624 - support.microsoft.com/help/5013624
KB5013625 - support.microsoft.com/help/5013625
KB5013627 - support.microsoft.com/help/5013627
KB5013628 - support.microsoft.com/help/5013628
KB5013630 - support.microsoft.com/help/5013630
KB5013837 - support.microsoft.com/help/5013837
KB5013838 - support.microsoft.com/help/5013838
KB5013839 - support.microsoft.com/help/5013839
KB5013840 - support.microsoft.com/help/5013840
KB5013868 - support.microsoft.com/help/5013868
KB5013870 - support.microsoft.com/help/5013870
KB5013871 - support.microsoft.com/help/5013871
KB5013872 - support.microsoft.com/help/5013872
KB5013873 - support.microsoft.com/help/5013873
KB5013952 - support.microsoft.com/help/5013952

CVEs related to QID 91904

CVE-2022-30130 |

Software Advisories

Advisory ID	Software	Component	Link
CVE-2022-30130			msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30130

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].