Red Hat Security Advisory

RHSA-2024:0805

dotnet7.0 security update

Released 2024-02-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) dotnet-sdk-7.0-source-built-artifacts-7.0.116-1.el9_3
Red Hat Enterprise Linux AppStream (v. 9) aspnetcore-runtime-7.0-7.0.16-1.el9_3, aspnetcore-targeting-pack-7.0-7.0.16-1.el9_3, dotnet-apphost-pack-7.0-7.0.16-1.el9_3 +6

TI-2024-14164 CVE-2024-21404 · GHSA-q5x8-3vm4-xrh9

HIGH 72

.NET Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02707 Published 2024-02-13 Fixed in 6.0.27, 7.0.16 +4 CWE-476

TI-2023-24860 CVE-2023-46233 · GHSA-xwcq-pm8m-c4vf

MEDIUM 48

crypto-js is a JavaScript library of crypto standards.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0064 Published 2023-10-25 Partial fix · 4.2.0 CWE-328

TI-2024-14146 CVE-2024-21386 · GHSA-g74q-5xw3-j7q9

LOW 37

.NET Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0242 Published 2024-02-13 Fixed in 6.0.27, 7.0.16 +4 CWE-400