Red Hat Security Advisory

RHSA-2022:0828

.NET 5.0 on RHEL 7 security and bugfix update

Released 2022-03-10 · Red Hat rating Important · View on Red Hat →

Fixed in

.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet50-aspnetcore-runtime-5.0-5.0.15-1.el7_9, rh-dotnet50-aspnetcore-targeting-pack-5.0-5.0.15-1.el7_9, rh-dotnet50-dotnet-5.0.212-1.el7_9 +9
.NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet50-aspnetcore-runtime-5.0-5.0.15-1.el7_9, rh-dotnet50-aspnetcore-targeting-pack-5.0-5.0.15-1.el7_9, rh-dotnet50-dotnet-5.0.212-1.el7_9 +9
.NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet50-aspnetcore-runtime-5.0-5.0.15-1.el7_9, rh-dotnet50-aspnetcore-targeting-pack-5.0-5.0.15-1.el7_9, rh-dotnet50-dotnet-5.0.212-1.el7_9 +9

Fixes 3 records

TI-2022-08333 CVE-2022-24464 · GHSA-cw98-9j8w-wxv9

.NET and Visual Studio Denial of Service Vulnerability

MEDIUM 45

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03551 Published 2022-03-09 Fixed in 6.0.3, 5.0.15 +5 CWE-400

TI-2020-07165 CVE-2020-8927 · GHSA-5v8v-66v8-mwm7

Buffer overflow in Brotli library

MEDIUM 41

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.03217 Published 2020-09-15 Fixed in 1.0.9, 3.1.23 +3 CWE-130

TI-2022-08379 CVE-2022-24512 · GHSA-c6w8-7mp3-34j9

.NET and Visual Studio Remote Code Execution Vulnerability

LOW 31

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.01608 Published 2022-03-09 Fixed in 16.7.26, 16.9.18 +8 CWE-94