Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

GHSA-3gp9-h8hw-pxpw

GitHub Security Advisory

Denial of service in .NET core

✓ GitHub Reviewed MODERATE Has CVE
View on GitHub

Advisory Details

.NET Core and Visual Studio Denial of Service Vulnerability due to a vulnerability which exists when creating HTTPS web request during X509 certificate chain building.

Affected Packages

NuGet Microsoft.NETCore.App
Affected versions: 2.1.0 (fixed in 2.1.25)
NuGet Microsoft.NETCore.App.Host.linux-arm
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Host.linux-arm64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Host.linux-musl-arm64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Host.linux-musl-x64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Host.linux-x64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Host.osx-x64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Host.rhel.6-x64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Host.win-arm
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Host.win-arm64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Host.win-x64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Host.win-x86
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Runtime.linux-arm
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Runtime.linux-arm64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Runtime.linux-musl-arm64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Runtime.linux-musl-x64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Runtime.linux-x64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Runtime.osx-x64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Runtime.rhel.6-x64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Runtime.win-arm
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Runtime.win-arm64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Runtime.win-x64
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Runtime.win-x86
Affected versions: 3.1.0 (fixed in 3.1.12)
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.Mono.linux-arm
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.Mono.linux-arm64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.Mono.linux-x64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.Mono.osx-x64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.android-arm
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.android-arm64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.android-x64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.android-x86
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.browser-wasm
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.ios-arm
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.ios-x64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.ios-x86
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.linux-arm
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.linux-arm64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.linux-musl-arm
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.linux-musl-arm64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.linux-musl-x64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.linux-x64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.osx-x64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.tvos-arm64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.tvos-x64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.win-arm
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.win-arm64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.win-x64
Affected versions: 5.0.0 (fixed in 5.0.3)
NuGet Microsoft.NETCore.App.Runtime.win-x86
Affected versions: 5.0.0 (fixed in 5.0.3)

Related CVEs

CVE-2021-1721

Key Information

GHSA ID
GHSA-3gp9-h8hw-pxpw
Published
May 24, 2022 5:43 PM
Last Modified
November 1, 2022 9:40 PM
CVSS Score
5.0 /10
Primary Ecosystem
NuGet
Primary Package
Microsoft.NETCore.App
GitHub Reviewed
✓ Yes

Dataset

Last updated: July 27, 2025 6:35 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.