CVE-2021-31957: .net from 5.0 (inclusive), through 5.0.6 (inclusive); +10 more affected products

Affected technology

.net · from 5.0 (inclusive), through 5.0.6 (inclusive)
microsoft

.net core · from 3.1 (inclusive), through 3.1.15 (inclusive)
microsoft

visual studio 2019 · from 16.0 (inclusive), through 16.10 (inclusive)
microsoft

visual studio 2019 · 8.10
microsoft

fedora · 33
fedoraproject

fedora · 34
fedoraproject

Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) · 16.0 to before 16.4.23
Microsoft

Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) · 16.0.0 to before 16.7.16
Microsoft

Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) · 15.0.0 to before 16.9.7
Microsoft

Microsoft Visual Studio 2019 version 16.10 (includes 16.0 - 16.9) · 16.10.0 to before 16.10.1
Microsoft

Visual Studio 2019 for Mac version 8.10 · 8.1.0 to before 8.10.1
Microsoft

.NET Core 3.1 · 3.1 to before 3.1.16
Microsoft

.NET 5.0 · 5.0.0 to before 5.0.7
Microsoft

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could disrupt service. Vendor/CNA’s CVSS 3.1 assessment (base score 5.9/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high.