Lucene search
Veracode Vulnerability DatabaseVERACODE:37976HistoryNov 10, 2022 - 1:49 p.m.
Information Disclosure
2022-11-1013:49:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
23
.net framework
information disclosure
asynchronously executed queries
0.0004 Low
EPSS
Percentile
9.5%
System.Data.SqlClient and Microsoft.Data.SqlClient packages in the .NET framework are vulnerable to information disclosure. The vulnerability occurs during heavy load, which lets an attacker access arbitrary data from asynchronously executed queries.
References
github.com/advisories/GHSA-8g2p-5pqh-5jmc
github.com/dotnet/announcements/issues/239
github.com/dotnet/runtime/issues/78042
github.com/dotnet/SqlClient/commit/39aa3022fb98f15a7ae3dea75063eb6f95c2b6a3
github.com/dotnet/SqlClient/commit/ced7ad048ed29307de5040855b24fb6c58a12689
github.com/dotnet/SqlClient/pull/928
github.com/dotnet/SqlClient/pull/959
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41064
Related
mscve
mscve
.NET Framework Information Disclosure Vulnerability
2022-11-08 08:00:00
mskb
mskb
openvas
openvas
Microsoft .NET Framework Information Disclosure Vulnerability (KB5020689)
2023-02-02 00:00:00
Microsoft .NET Framework Information Disclosure Vulnerability (KB5020690)
2023-02-02 00:00:00
Microsoft .NET Framework Information Disclosure Vulnerability (KB5020688)
2023-02-02 00:00:00
ubuntucve
ubuntucve
CVE-2022-41064
2022-11-09 00:00:00
github
github
.NET Information Disclosure Vulnerability
2022-11-08 23:00:22
cve
cve
CVE-2022-41064
2022-11-09 22:15:20
nvd
nvd
CVE-2022-41064
2022-11-09 22:15:20
osv
osv
.NET Information Disclosure Vulnerability
2022-11-08 23:00:22
prion
prion
Information disclosure
2022-11-09 22:15:00
nessus
nessus
Security Updates for Microsoft .NET Framework (November 2022)
2022-11-10 00:00:00
KB5019970: Windows 10 LTS 1507 Security Update (November 2022)
2022-11-08 00:00:00
cvelist
cvelist
CVE-2022-41064 .NET Framework Information Disclosure Vulnerability
2022-11-09 00:00:00
kaspersky
kaspersky
KLA20040 Multiple vulnerabilities in Microsoft Developer Tools
2022-11-08 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - November 2022
2022-11-08 20:02:57