Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2021:3148
HistoryAug 12, 2021 - 6:29 a.m.

(RHSA-2021:3148) Important: .NET 5.0 security and bugfix update

2021-08-1206:29:43
access.redhat.com
59

0.002 Low

EPSS

Percentile

56.5%

JSON

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 5.0.206 and .NET Runtime 5.0.9.

Security Fix(es):

  • dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

  • dotnet: Dump file created world-readable (CVE-2021-34485)

  • dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64aspnetcore-targeting-pack-5.0< 5.0.9-1.el8_4aspnetcore-targeting-pack-5.0-5.0.9-1.el8_4.x86_64.rpm
RedHat8x86_64aspnetcore-runtime-5.0< 5.0.9-1.el8_4aspnetcore-runtime-5.0-5.0.9-1.el8_4.x86_64.rpm
RedHat8x86_64dotnet-host< 5.0.9-1.el8_4dotnet-host-5.0.9-1.el8_4.x86_64.rpm
RedHat8x86_64dotnet5.0-debuginfo< 5.0.206-1.el8_4dotnet5.0-debuginfo-5.0.206-1.el8_4.x86_64.rpm
RedHat8x86_64dotnet< 5.0.206-1.el8_4dotnet-5.0.206-1.el8_4.x86_64.rpm
RedHat8x86_64dotnet-sdk-5.0-debuginfo< 5.0.206-1.el8_4dotnet-sdk-5.0-debuginfo-5.0.206-1.el8_4.x86_64.rpm
RedHat8x86_64dotnet-targeting-pack-5.0< 5.0.9-1.el8_4dotnet-targeting-pack-5.0-5.0.9-1.el8_4.x86_64.rpm
RedHat8x86_64dotnet-host-debuginfo< 5.0.9-1.el8_4dotnet-host-debuginfo-5.0.9-1.el8_4.x86_64.rpm
RedHat8x86_64dotnet-hostfxr-5.0-debuginfo< 5.0.9-1.el8_4dotnet-hostfxr-5.0-debuginfo-5.0.9-1.el8_4.x86_64.rpm
RedHat8x86_64dotnet5.0-debugsource< 5.0.206-1.el8_4dotnet5.0-debugsource-5.0.206-1.el8_4.x86_64.rpm
Rows per page:
1-10 of 181

Related

redhat 5
almalinux 3
rocky 3
nessus 20
oraclelinux 3
kaspersky 1
altlinux 13
openvas 1
osv 11
github 3
redhatcve 3
veracode 1
mscve 3
prion 3
cvelist 3
cve 3
qualysblog 1
ibm 1
rapid7blog 1
redhat
redhat
(RHSA-2021:3147) Important: .NET 5.0 on RHEL 7 security and bugfix update
2021-08-12 06:29:38
(RHSA-2021:3142) Important: .NET Core 3.1 security and bugfix update
2021-08-11 18:21:49
(RHSA-2021:3143) Important: .NET Core 3.1 on RHEL 7 security and bugfix update
2021-08-11 18:24:19
almalinux
almalinux
Important: .NET 5.0 security and bugfix update
2021-08-12 06:29:43
Important: .NET Core 3.1 security and bugfix update
2021-08-11 18:21:49
Low: .NET Core 2.1 security and bugfix update
2021-08-11 18:43:42
rocky
rocky
.NET Core 3.1 security and bugfix update
2021-08-12 20:59:59
.NET 5.0 security and bugfix update
2021-08-12 21:05:09
.NET Core 2.1 security and bugfix update
2021-08-12 20:54:48
nessus
nessus
RHEL 7 : .NET Core 3.1 on RHEL 7 (RHSA-2021:3143)
2021-08-16 00:00:00
Oracle Linux 8 : .NET / 5.0 (ELSA-2021-3148)
2021-08-13 00:00:00
Oracle Linux 8 : .NET / Core / 3.1 (ELSA-2021-3142)
2021-08-13 00:00:00
oraclelinux
oraclelinux
.NET Core 3.1 security and bugfix update
2021-08-13 00:00:00
.NET 5.0 security and bugfix update
2021-08-13 00:00:00
.NET Core 2.1 security and bugfix update
2021-08-12 00:00:00
kaspersky
kaspersky
KLA12257 Multiple vulnerabilities in Microsoft Developer Tools
2021-08-10 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.22-alt1
2022-03-22 00:00:00
Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.22-alt1
2022-02-21 00:00:00
Security fix for the ALT Linux 9 package dotnet-corefx-3.1 version 3.1.22-alt1
2022-03-22 00:00:00
openvas
openvas
.NET Core Denial of Service And Information Disclosure Vulnerabilities - Windows
2021-08-11 00:00:00
osv
osv
CVE-2021-34532
2021-08-12 18:15:09
ASP.NET Core Information Disclosure Vulnerability
2021-08-25 14:45:28
BIT-aspnet-core-2021-34532
2024-03-06 10:53:27
github
github
ASP.NET Core Information Disclosure Vulnerability
2021-08-25 14:45:28
.NET Core Elevation of Privilege Vulnerability
2022-10-25 17:33:12
.NET Core Information Disclosure Vulnerability
2022-10-20 21:34:09
redhatcve
redhatcve
CVE-2021-34532
2021-08-10 17:20:41
CVE-2021-34485
2021-08-10 22:56:10
CVE-2021-26423
2021-08-10 17:25:31
veracode
veracode
Information Disclosure
2021-08-26 05:02:39
mscve
mscve
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
2021-08-10 07:00:00
.NET Core and Visual Studio Denial of Service Vulnerability
2021-08-10 07:00:00
.NET Core and Visual Studio Information Disclosure Vulnerability
2021-08-10 07:00:00
prion
prion
Information disclosure
2021-08-12 18:15:00
Information disclosure
2021-08-12 18:15:00
Denial of service
2021-08-12 18:15:00
cvelist
cvelist
CVE-2021-34532 ASP.NET Core and Visual Studio Information Disclosure Vulnerability
2021-08-12 18:12:05
CVE-2021-26423 .NET Core and Visual Studio Denial of Service Vulnerability
2021-08-12 18:11:31
CVE-2021-34485 .NET Core and Visual Studio Information Disclosure Vulnerability
2021-08-12 18:11:57
cve
cve
CVE-2021-34532
2021-08-12 18:15:09
CVE-2021-34485
2021-08-12 18:15:09
CVE-2021-26423
2021-08-12 18:15:08
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday (August 2021) – Microsoft 51 Vulnerabilities with 7 Critical, Adobe 29 Vulnerabilities
2021-08-10 19:58:49
ibm
ibm
Security Bulletin: Multiple Vulnerabilities may affect IBM Robotic Process Automation
2022-05-04 18:53:46
rapid7blog
rapid7blog
Patch Tuesday - August 2021
2021-08-11 03:19:33

0.002 Low

EPSS

Percentile

56.5%

JSON
Related for RHSA-2021:3148
redhat5almalinux3rocky3nessus20oraclelinux3kaspersky1altlinux13openvas1osv11github3redhatcve3veracode1mscve3prion3cvelist3cve3qualysblog1ibm1rapid7blog1