Red Hat Security Advisory

RHSA-2019:1236

.NET Core on Red Hat Enterprise Linux security and bug fix update

Released 2019-05-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet21-2.1-10.el7, rh-dotnet21-dotnet-2.1.507-2.el7, rh-dotnet21-dotnet-host-2.1.11-2.el7 +17
.NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet21-2.1-10.el7, rh-dotnet21-dotnet-2.1.507-2.el7, rh-dotnet21-dotnet-host-2.1.11-2.el7 +17
.NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet21-2.1-10.el7, rh-dotnet21-dotnet-2.1.507-2.el7, rh-dotnet21-dotnet-host-2.1.11-2.el7 +17

Fixes 3 records

TI-2019-00719 CVE-2019-0981 · GHSA-5f2m-466j-3848

A denial of service vulnerability exists when .NET Framework or .NET Core improperly…

MEDIUM 41

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04984 Published 2019-05-16 Fixed in 4.3.2 CWE-19

TI-2019-00718 CVE-2019-0980 · GHSA-xhfc-gr8f-ffwc

A denial of service vulnerability exists when .NET Framework or .NET Core improperly…

MEDIUM 41

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04984 Published 2019-05-16 Fixed in 4.3.2 CWE-19

TI-2019-00581 CVE-2019-0820 · GHSA-cmhx-cq75-c4mj

Uncontrolled resource consumption in Microsoft .NET Framework 4.5.2

MEDIUM 41

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05719 Published 2019-05-16 Fixed in 4.3.1 CWE-400