Red Hat Security AdvisoryRHSA-2022:0829
.NET Core 3.1 on RHEL 7 security and bugfix update
Released 2022-03-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.23-1.el7_9, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.23-1.el7_9, rh-dotnet31-dotnet-3.1.417-1.el7_9 +9
- .NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.23-1.el7_9, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.23-1.el7_9, rh-dotnet31-dotnet-3.1.417-1.el7_9 +9
- .NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.23-1.el7_9, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.23-1.el7_9, rh-dotnet31-dotnet-3.1.417-1.el7_9 +9
Fixes 3 records
Priority MEDIUM 45
.NET and Visual Studio Denial of Service Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03551 · Published 2022-03-09 · Fixed in 6.0.3, 5.0.15 +5 CWE-400
Priority MEDIUM 41
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over…
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.03217 · Published 2020-09-15 · Fixed in 1.0.9, 3.1.23 +3 CWE-130
Priority LOW 31
.NET and Visual Studio Remote Code Execution Vulnerability
CVSS 3.1MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.01608 · Published 2022-03-09 · Fixed in 16.7.26, 16.9.18 +8 CWE-94