Red Hat Security AdvisoryRHSA-2019:1259
dotnet security, bug fix, and enhancement update
Released 2019-05-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) dotnet-2.1.507-2.el8_0, dotnet-host-2.1.11-2.el8_0, dotnet-host-fxr-2.1-2.1.11-2.el8_0 +3
Fixes 4 records
Priority MEDIUM 41
A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04984 · Published 2019-05-16 · Fixed in 4.3.2 CWE-19
Priority MEDIUM 41
A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04984 · Published 2019-05-16 · Fixed in 4.3.2 CWE-19
Priority MEDIUM 41
A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05719 · Published 2019-05-16 · Fixed in 4.3.1 CWE-400
Priority LOW 34
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02696 · Published 2019-04-09 · Fixed