Red Hat Security Advisory

RHSA-2020:0134

.NET Core on Red Hat Enterprise Linux security and bug fix update

Released 2020-01-16 · Red Hat rating Critical · View on Red Hat →

Fixed in

.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet30-aspnetcore-runtime-3.0-3.0.2-3.el7, rh-dotnet30-aspnetcore-targeting-pack-3.0-3.0.2-3.el7, rh-dotnet30-dotnet-3.0.102-3.el7 +19
.NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet30-aspnetcore-runtime-3.0-3.0.2-3.el7, rh-dotnet30-aspnetcore-targeting-pack-3.0-3.0.2-3.el7, rh-dotnet30-dotnet-3.0.102-3.el7 +19
.NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet30-aspnetcore-runtime-3.0-3.0.2-3.el7, rh-dotnet30-aspnetcore-targeting-pack-3.0-3.0.2-3.el7, rh-dotnet30-dotnet-3.0.102-3.el7 +19

Fixes 2 records

TI-2020-00580 CVE-2020-0603 · GHSA-655q-9gvg-q4cm

Out-of-bounds write in Microsoft ASP.NET Core

MEDIUM 58

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context o…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.22561 Published 2020-01-14 Fixed in 2.1.15, 3.1.1 +2 CWE-787

TI-2020-00579 CVE-2020-0602 · GHSA-23cv-jh4v-vffm

Uncontrolled resource consumption in Microsoft ASP.NET Core

MEDIUM 44

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08147 Published 2020-01-14 Fixed in 2.1.15, 3.1.1 +2 CWE-400