Red Hat Security Advisory

RHSA-2020:2249

.NET Core on Red Hat Enterprise Linux security and bug fix update

Released 2020-05-21 · Red Hat rating Important · View on Red Hat →

Fixed in

.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.4-2.el7, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.4-2.el7, rh-dotnet31-dotnet-3.1.104-2.el7 +8
.NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.4-2.el7, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.4-2.el7, rh-dotnet31-dotnet-3.1.104-2.el7 +8
.NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.4-2.el7, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.4-2.el7, rh-dotnet31-dotnet-3.1.104-2.el7 +8

TI-2020-01075 CVE-2020-1108 · GHSA-3w5p-jhp5-c29q

MEDIUM 42

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06462 Published 2020-05-21 Fixed in publication, 2.1.18 +1

TI-2020-01126 CVE-2020-1161 · GHSA-3cf7-7wq6-8842

MEDIUM 41

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05313 Published 2020-05-21 Fixed in publication, 3.1.4 CWE-20