Microsoft · Net 6.0 · CVE-2022-24464
**Name of the Vulnerable Software and Affected Versions**
.NET 6.0 versions 6.0.0 through 6.0.2
.NET 5.0 versions 5.0.0 through 5.0.14
.NET Core 3.1 versions 3.1.0 through 3.1.22
**Description**
The issue is related to incorrect clearing or release of resources, which can be exploited by a remote attacker to cause a denial of service. The vulnerability exists in .NET 6.0, .NET 5.0, and .NET Core 3.1 when parsing certain types of HTTP form requests.
**Recommendations**
To fix the issue, update .NET 6.0 to version 6.0.3 or later.
To fix the issue, update .NET 5.0 to version 5.0.15 or later.
To fix the issue, update .NET Core 3.1 to version 3.1.23 or later.
As a temporary workaround, consider restricting access to the vulnerable HTTP form request parsing functionality until a patch is available.