Red Hat Security Advisory

RHSA-2022:2196

.NET 5.0 on RHEL 7 security and bugfix update

Released 2022-05-11 · Red Hat rating Important · View on Red Hat →

Fixed in

.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet50-aspnetcore-runtime-5.0-5.0.17-1.el7_9, rh-dotnet50-aspnetcore-targeting-pack-5.0-5.0.17-1.el7_9, rh-dotnet50-dotnet-5.0.214-1.el7_9 +9
.NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet50-aspnetcore-runtime-5.0-5.0.17-1.el7_9, rh-dotnet50-aspnetcore-targeting-pack-5.0-5.0.17-1.el7_9, rh-dotnet50-dotnet-5.0.214-1.el7_9 +9
.NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet50-aspnetcore-runtime-5.0-5.0.17-1.el7_9, rh-dotnet50-aspnetcore-targeting-pack-5.0-5.0.17-1.el7_9, rh-dotnet50-dotnet-5.0.214-1.el7_9 +9

TI-2022-11690 CVE-2022-29145 · GHSA-fcg8-mg9g-6hc4

MEDIUM 47

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05538 Published 2022-05-10 Fixed in 6.0.5, 3.1.25 +5 CWE-400

TI-2022-11665 CVE-2022-29117 · GHSA-3rq8-h3gj-r5c6

MEDIUM 47

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05735 Published 2022-05-10 Fixed in 6.0.5, 3.1.25 +6 CWE-400

TI-2022-07392 CVE-2022-23267 · GHSA-485p-mrj5-8w2v

MEDIUM 47

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05703 Published 2022-05-10 Fixed in 3.1.25, 5.0.17 +9 CWE-400