Clarification on CVE-2022-29117 .NET Denial of Service Vulnerability

Question

This article:

suggests that only applications using .NET 6, .NET 5 or .NET Core 3.1 are impacted.

Are .NET Framework applications (from 4.6.2 to 4.8) impacted if the vulnerable assembly versions mentioned in the advisory are referenced?

Harald Greve · Answer

I raised a support ticket with Microsoft's .NET team about this. They suggested to install a security update as a solution: