CVE-2022-23267
HighAdvisory
Published 21 Oct 2022In the index since 8 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.053
- 92nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 12
- of 17,781 indexed, latest versions
- Container images
- 25
- deployed by those charts
- Fix available
- 1 of 1
- affected package
.NET Denial of Service Vulnerability
Carried by container images the latest versions of 12 of 17,781 indexed charts deploy, on 25 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| Microsoft.AspNetCore.App.Runtime.linux-x64nuget | 3.1.3, 3.1.4, 3.1.5, 3.1.9+7 more | 3.1.25, 5.0.17, 6.0.5 | 25 |
- OSV records
- GHSA-485p-mrj5-8w2v
- Also known as
- BIT-dotnet-2022-23267, BIT-dotnet-sdk-2022-23267, BIT-powershell-2022-23267
Charts affected
12 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| voice-biometricslumenvox | 2.0.1 | 12 of 26See more | 70,741 |
| testhubteshubVerified publisher | 0.1.4 | 1 of 3See more | 7,517 |
| kafkamagicdysnixVerified publisher | 0.2.3 | 1 of 1See more | 1,906 |
| faasnetfaasnet | 0.0.4 | 2 of 5See more | 7,617 |
| archisteamfarmg0dscookie | 0.3.0 | 1 of 2See more | 966 |
| helm-chart-samplehelm-chart-sampleVerified publisher | 0.1.0 | 1 of 2See more | 964 |
| external-scaler-azure-cosmos-dbkedacore | 0.1.0 | 1 of 1See more | 1,186 |
| nbxplorerkronkltdVerified publisher | 0.1.5 | 1 of 2See more | 1,669 |
| myfirstdockerkubermyrepo | 0.1.0 | 1 of 1See more | 1,455 |
| polyglotncsaVerified publisher | 0.1.1 | 1 of 18See more | 55,726 |
| bagetsimcube | 1.0.5 | 1 of 1See more | 1,687 |
| dotstatsuitestatcan | 0.2.8 | 2 of 6See more | 3,841 |
Container images carrying it
25 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| craigwillis/ | ae317d7e4724 | Microsoft.AspNetCore.App.Runtime.linux-x64 | 3.1.25 | 1 |
| digitsy/ | f91d7f56b55d | Microsoft.AspNetCore.App.Runtime.linux-x64 | 3.1.25 | 1 |
| karatejb/ | f11ac24b23b9 | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| kodalisri/ | 202268d66e1a | Microsoft.AspNetCore.App.Runtime.linux-x64 | 3.1.25 | 1 |
| loicsharma/ | a880c78ae80b | Microsoft.AspNetCore.App.Runtime.linux-x64 | 3.1.25 | 1 |
| lumenvox/ | fcb9fb54a9fd | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| lumenvox/ | 147854a3c916 | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| lumenvox/ | 79428add7f38 | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| lumenvox/ | 53decadc102d | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| lumenvox/ | 17fbce1a8bc6 | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| lumenvox/ | ea8110886d38 | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| lumenvox/ | e2e5abe27abc | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| lumenvox/ | b9a23345eabd | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| lumenvox/ | 7a9ffdc2178a | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| lumenvox/ | dbbaf5462ad6 | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| lumenvox/ | 8b74f9d3ba09 | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| lumenvox/ | 14170ad34903 | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| nicolasdorier/ | ee70dba03ec2 | Microsoft.AspNetCore.App.Runtime.linux-x64 | 3.1.25 | 1 |
| simpleidserver/ | 53c159ea49ca | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| simpleidserver/ | 9007e742dd48 | Microsoft.AspNetCore.App.Runtime.linux-x64 | 5.0.17 | 1 |
| siscc/ | bb1e9a45b6fa | Microsoft.AspNetCore.App.Runtime.linux-x64 | 3.1.25 | 1 |
| siscc/ | 00d73f06edcf | Microsoft.AspNetCore.App.Runtime.linux-x64 | 3.1.25 | 1 |
| testhubio/ | 56badee134b9 | Microsoft.AspNetCore.App.Runtime.linux-x64 | 3.1.25 | 1 |
| ghcr.io/ | c7c0a52303cb | Microsoft.AspNetCore.App.Runtime.linux-x64 | 6.0.5 | 1 |
| ghcr.io/ | 4985d164ead9 | Microsoft.AspNetCore.App.Runtime.linux-x64 | 3.1.25 | 1 |