CVE-2022-29117

CVSS 2.0 Score 5 of 10 (medium)

Details

Published May 10, 2022
Updated: Jan 2, 2025

Summary

CVE-2022-29117 is a Denial of Service (DoS) vulnerability affecting .NET and Visual Studio applications. Maliciously crafted requests can cause an infinite loop in the affected software, leading to a consumption of excessive system resources and ultimately, a Denial of Service condition. This issue can potentially impact both client-side and server-side applications using the affected versions of .NET and Visual Studio. Microsoft has released patches to address this vulnerability, and users are strongly advised to apply them promptly to mitigate potential threats.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft .NET Framework
  • Visual Studio 2019
  • Fedora Operating System
  • Microsoft Visual Studio 2022
  • .NET Core

Affected Vendors

  • Microsoft
  • Fedora Project