CVE-2022-34716
MediumAdvisory
Published 3 Feb 2024In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.023
- 82nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 27
- of 17,781 indexed, latest versions
- Container images
- 49
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
.NET Information Disclosure Vulnerability
Carried by container images the latest versions of 27 of 17,781 indexed charts deploy, on 49 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| System.Security.Cryptography.Xmlnuget | 4.0.3.0, 4.4.0, 4.5.0, 4.6.25519.03+4 more | 4.7.1, 6.0.1 | 45 |
| Microsoft.AspNetCore.App.Runtime.linux-x64nuget | 3.1.3, 3.1.4, 3.1.5, 3.1.9+5 more | 3.1.28, 6.0.8 | 14 |
- OSV records
- GHSA-vh55-786g-wjwj
- Also known as
- BIT-dotnet-2022-34716, BIT-dotnet-sdk-2022-34716, BIT-powershell-2022-34716
Charts affected
27 by stars
Container images carrying it
49 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| kodekloud/ | 741e3aaaa812 | System.Security.Cryptography.Xml | 4.7.1 | 4 |
| aidasi/ | 838b5e2080bc | Microsoft.AspNetCore.App.Runtime.linux-x64 | 6.0.8 | 1 |
| aidasi/ | fee6857b9bc9 | Microsoft.AspNetCore.App.Runtime.linux-x64 | 6.0.8 | 1 |
| aidasi/ | 5ce8dbff7fdc | Microsoft.AspNetCore.App.Runtime.linux-x64 | 6.0.8 | 1 |
| aidasi/ | d433285c7d5a | Microsoft.AspNetCore.App.Runtime.linux-x64 System.Security.Cryptography.Xml | 6.0.8 6.0.1 | 1 |
| beubi/ | a02c2e200920 | System.Security.Cryptography.Xml | 4.7.1 | 1 |
| craigwillis/ | ae317d7e4724 | Microsoft.AspNetCore.App.Runtime.linux-x64 System.Security.Cryptography.Xml | 3.1.28 4.7.1 | 1 |
| datalust/ | 9c731bb207a6 | System.Security.Cryptography.Xml | 4.7.1 | 1 |
| digitsy/ | f91d7f56b55d | Microsoft.AspNetCore.App.Runtime.linux-x64 System.Security.Cryptography.Xml | 3.1.28 4.7.1 | 1 |
| ironmansoftware/ | 1943c73cce31 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| karatejb/ | f11ac24b23b9 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| kodalisri/ | 202268d66e1a | Microsoft.AspNetCore.App.Runtime.linux-x64 System.Security.Cryptography.Xml | 3.1.28 4.7.1 | 1 |
| linuxserver/ | 2fbb21fb4903 | System.Security.Cryptography.Xml | 4.7.1 | 1 |
| loicsharma/ | a880c78ae80b | Microsoft.AspNetCore.App.Runtime.linux-x64 System.Security.Cryptography.Xml | 3.1.28 4.7.1 | 1 |
| lumenvox/ | fcb9fb54a9fd | System.Security.Cryptography.Xml | 4.7.1 | 1 |
| lumenvox/ | 147854a3c916 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| lumenvox/ | 79428add7f38 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| lumenvox/ | 53decadc102d | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| lumenvox/ | 17fbce1a8bc6 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| lumenvox/ | ea8110886d38 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| lumenvox/ | e2e5abe27abc | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| lumenvox/ | b9a23345eabd | System.Security.Cryptography.Xml | 4.7.1 | 1 |
| lumenvox/ | 7a9ffdc2178a | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| lumenvox/ | dbbaf5462ad6 | System.Security.Cryptography.Xml | 4.7.1 | 1 |
| lumenvox/ | 8b74f9d3ba09 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| lumenvox/ | 14170ad34903 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| nicolasdorier/ | ee70dba03ec2 | Microsoft.AspNetCore.App.Runtime.linux-x64 System.Security.Cryptography.Xml | 3.1.28 4.7.1 | 1 |
| simpleidserver/ | 53c159ea49ca | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| simpleidserver/ | 9007e742dd48 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| siscc/ | bb1e9a45b6fa | Microsoft.AspNetCore.App.Runtime.linux-x64 System.Security.Cryptography.Xml | 3.1.28 4.7.1 | 1 |
| siscc/ | 00d73f06edcf | Microsoft.AspNetCore.App.Runtime.linux-x64 System.Security.Cryptography.Xml | 3.1.28 4.7.1 | 1 |
| testhubio/ | 56badee134b9 | Microsoft.AspNetCore.App.Runtime.linux-x64 System.Security.Cryptography.Xml | 3.1.28 4.7.1 | 1 |
| zbalogh/ | 09a51b809674 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| ghcr.io/ | c7c0a52303cb | Microsoft.AspNetCore.App.Runtime.linux-x64 | 6.0.8 | 1 |
| ghcr.io/ | 54ebc1f90963 | System.Security.Cryptography.Xml | 4.7.1 | 1 |
| ghcr.io/ | ad943e9309e4 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| ghcr.io/ | 4985d164ead9 | Microsoft.AspNetCore.App.Runtime.linux-x64 System.Security.Cryptography.Xml | 3.1.28 4.7.1 | 1 |
| ghcr.io/ | 03c8c835ecee | System.Security.Cryptography.Xml | 4.7.1 | 1 |
| ghcr.io/ | bce34c98668e | System.Security.Cryptography.Xml | 4.7.1 | 1 |
| ghcr.io/ | 22ce496c67d7 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| ghcr.io/ | 7e53010dda55 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| ghcr.io/ | 26465a2bf671 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| ghcr.io/ | 50cab15c80d9 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| ghcr.io/ | 206a9bee17a8 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| ghcr.io/ | dd5ce454072e | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| ghcr.io/ | 7ecb00f53d99 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| ghcr.io/ | e53bf47b62d0 | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| ghcr.io/ | 5e836b17337f | System.Security.Cryptography.Xml | 6.0.1 | 1 |
| ghcr.io/ | 2ca91145099c | System.Security.Cryptography.Xml | 6.0.1 | 1 |