Red Hat Security Advisory

RHSA-2020:3421

.NET Core 3.1 security and bugfix update for Red Hat Enterprise Linux

Released 2020-08-11 · Red Hat rating Important · View on Red Hat →

Fixed in

.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.7-1.el7, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.7-1.el7, rh-dotnet31-dotnet-3.1.107-1.el7 +8
.NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.7-1.el7, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.7-1.el7, rh-dotnet31-dotnet-3.1.107-1.el7 +8
.NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.7-1.el7, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.7-1.el7, rh-dotnet31-dotnet-3.1.107-1.el7 +8

TI-2020-01553 CVE-2020-1597 · GHSA-f8qx-mjcq-wfgx

MEDIUM 42

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06561 Published 2020-08-17 Fixed in publication, 2.1.21 +1 CWE-20