Red Hat Security Advisory

RHSA-2024:2843

.NET 7.0 security update

Released 2024-05-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) aspnetcore-runtime-7.0-7.0.19-1.el9_4, aspnetcore-targeting-pack-7.0-7.0.19-1.el9_4, dotnet-apphost-pack-7.0-7.0.19-1.el9_4 +6
Red Hat Enterprise Linux CRB (v. 9) dotnet-sdk-7.0-source-built-artifacts-7.0.119-1.el9_4

TI-2024-14164 CVE-2024-21404 · GHSA-q5x8-3vm4-xrh9

HIGH 72

.NET Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02707 Published 2024-02-13 Fixed in 6.0.27, 7.0.16 +4 CWE-476

TI-2024-14146 CVE-2024-21386 · GHSA-g74q-5xw3-j7q9

LOW 37

.NET Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0242 Published 2024-02-13 Fixed in 6.0.27, 7.0.16 +4 CWE-400

TI-2024-19807 CVE-2024-30045 · GHSA-7fcr-8qw6-92fr

LOW 31

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.01248 Published 2024-05-14 Fixed in 8.0.5, 7.0.19 +5 CWE-122

TI-2024-19808 CVE-2024-30046 · GHSA-hhc7-x9w4-cw47

LOW 30

Visual Studio Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01688 Published 2024-05-14 Fixed in 7.0.19, 8.0.5 +4 CWE-362