Red Hat Security AdvisoryRHSA-2019:0040
.NET Core on Red Hat Enterprise Linux security update
Released 2019-01-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet21-2.1-6.el7, rh-dotnet21-dotnet-2.1.503-1.el7, rh-dotnet21-dotnet-host-2.1.7-1.el7 +12
- .NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet21-2.1-6.el7, rh-dotnet21-dotnet-2.1.503-1.el7, rh-dotnet21-dotnet-host-2.1.7-1.el7 +12
- .NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet21-2.1-6.el7, rh-dotnet21-dotnet-2.1.503-1.el7, rh-dotnet21-dotnet-host-2.1.7-1.el7 +12
Fixes 3 records
Priority MEDIUM 45
An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This a…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.09611 · Published 2019-01-08 · Fixed in 2.1.7, 2.2.1 CWE-200
Priority MEDIUM 44
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.08386 · Published 2019-01-08 · Fixed in 2.2.1, 2.1.7 +1 CWE-19
Priority MEDIUM 44
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0821 · Published 2019-01-08 · Fixed CWE-19
THREATIST.IORead the docs