Red Hat Security Advisory

RHSA-2022:2194

.NET Core 3.1 on RHEL 7 security and bugfix update

Released 2022-05-11 · Red Hat rating Important · View on Red Hat →

Fixed in

.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.25-1.el7_9, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.25-1.el7_9, rh-dotnet31-dotnet-3.1.419-1.el7_9 +9
.NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.25-1.el7_9, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.25-1.el7_9, rh-dotnet31-dotnet-3.1.419-1.el7_9 +9
.NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.25-1.el7_9, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.25-1.el7_9, rh-dotnet31-dotnet-3.1.419-1.el7_9 +9

TI-2022-11690 CVE-2022-29145 · GHSA-fcg8-mg9g-6hc4

MEDIUM 47

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05538 Published 2022-05-10 Fixed in 6.0.5, 3.1.25 +5 CWE-400

TI-2022-11665 CVE-2022-29117 · GHSA-3rq8-h3gj-r5c6

MEDIUM 47

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05735 Published 2022-05-10 Fixed in 6.0.5, 3.1.25 +6 CWE-400

TI-2022-07392 CVE-2022-23267 · GHSA-485p-mrj5-8w2v

MEDIUM 47

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05703 Published 2022-05-10 Fixed in 3.1.25, 5.0.17 +9 CWE-400