Red Hat Security AdvisoryRHSA-2026:84491
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-10-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images dotnet-sdk-10.0-10.0.113-1.hum1@aarch64, dotnet-sdk-10.0-10.0.113-1.hum1@s390x, dotnet-sdk-10.0-10.0.113-1.hum1@x86_64 +12
Fixes 12 records
Priority MEDIUM 41
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00969 · Published 2026-10-13 · Fixed in 2.0.50727.9188 AND 3.0.30729.9171, 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 +10 CWE-770
Priority MEDIUM 41
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00534 · Published 2026-10-13 · Fixed in 10.0.402, 11.0.100-rc.2 +2 CWE-347
Priority MEDIUM 41
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00991 · Published 2026-10-13 · Fixed in 10.0.13, 11.0.0-rc.2 +10 CWE-787
Priority MEDIUM 41
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00991 · Published 2026-10-13 · Fixed in 2.0.50727.9188 AND 3.0.30729.9171, 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 +11 CWE-407
Priority MEDIUM 41
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0123 · Published 2026-10-13 · Fixed in 17.14.42, 18.10.4 +5 CWE-770
Priority MEDIUM 41
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0125 · Published 2026-10-13 · Fixed in 10.0.13, 11.0.0-rc.2 +12 CWE-407
Priority MEDIUM 41
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0125 · Published 2026-10-13 · Fixed in 10.0.13, 11.0.0-rc.2 +12 CWE-674
Priority LOW 36
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00638 · Published 2026-10-13 · Fixed in 10.0.113, 8.0.132 +3 CWE-829
Priority LOW 36
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00411 · Published 2026-10-13 · Fixed in 10.0.13, 11.0.0-rc.2 +4 CWE-59
Priority LOW 36
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00411 · Published 2026-10-13 · Fixed in 10.0.13, 11.0.0-rc.2 +4 CWE-59
Priority LOW 29
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00296 · Published 2026-10-13 · Fixed in 10.0.113, 11.0.100-rc.2 +4 CWE-346
Priority LOW 28
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00785 · Published 2026-10-13 · Fixed in 10.0.13, 11.0.0-rc.2 +4 CWE-201
THREATIST.IORead the docs