CVE:CVE-2022-21986
CNNVD:CNNVD-202202-594
Kestrel Web Server是一个ASP.NET Core的跨平台Web 服务器。
Kestrel Web Server存在输入验证错误漏洞。以下产品和版本受到影响：Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8),Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10),Microsoft Visual Studio 2022 version 17.0,Visual Studio 2019 for Mac version 8.10,.NET 5.0,.NET 6.0
solution:Upgrade microsoft .net to a higher version than 5.0.14,6.0.2,and avoid the version [5.0,5.0.14),[6.0.0,6.0.2); Upgrade microsoft visual_studio_2019 to a higher version than 8.10.18,16.11,and avoid the version [8.10,8.10.18),[16.0,16.11]; Upgrade microsoft visual_studio_2022 to a higher version than 17.0.6,and avoid the version [17.0,17.0.6); Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35