Red Hat Security Advisory

RHSA-2017:3248

.NET Core security update

Released 2017-11-20 · Red Hat rating Low · View on Red Hat →

Fixed in

.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet20-dotnet-2.0.3-4.el7, rh-dotnet20-dotnet-host-2.0.3-4.el7, rh-dotnet20-dotnet-runtime-2.0-2.0.3-4.el7 +3
.NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet20-dotnet-2.0.3-4.el7, rh-dotnet20-dotnet-host-2.0.3-4.el7, rh-dotnet20-dotnet-runtime-2.0-2.0.3-4.el7 +3
.NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet20-dotnet-2.0.3-4.el7, rh-dotnet20-dotnet-host-2.0.3-4.el7, rh-dotnet20-dotnet-runtime-2.0-2.0.3-4.el7 +3

Fixes 2 records

TI-2017-06116 CVE-2017-8585 · GHSA-8884-xcr4-r68p

Improper input validation in Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7

MEDIUM 45

Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resulting in denial of service, aka .NET Denial of Service Vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.095 Published 2017-07-11 Fixed in 1.0.7, 1.1.4 CWE-20

TI-2017-08723 CVE-2017-11770 · GHSA-7mfr-774f-w5r9

Improper certificate validation in Microsoft .NET Core

MEDIUM 41

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05423 Published 2017-11-15 Fixed in 4.1.2, 2.0.3 CWE-295