Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2020:2250
HistoryMay 21, 2020 - 3:44 p.m.

(RHSA-2020:2250) Important: dotnet3.1 security update

2020-05-2115:44:48
access.redhat.com
44

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

49.8%

JSON

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address security vulnerabilities are now available. The updated versions are .NET Core SDK 3.1.104 and .NET Core Runtime 3.1.4.

Security Fixes:

  • dotnet: Denial of service via untrusted input (CVE-2020-1108)
  • dotnet: Denial of service due to infinite loop (CVE-2020-1161)

Default inclusions for applications built with .NET Core have been updated to reference the newest versions and their security fixes.

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64dotnet-runtime-3.1-debuginfo< 3.1.4-2.el8_2dotnet-runtime-3.1-debuginfo-3.1.4-2.el8_2.x86_64.rpm
RedHat8x86_64dotnet-hostfxr-3.1< 3.1.4-2.el8_2dotnet-hostfxr-3.1-3.1.4-2.el8_2.x86_64.rpm
RedHat8x86_64dotnet-sdk-3.1< 3.1.104-2.el8_2dotnet-sdk-3.1-3.1.104-2.el8_2.x86_64.rpm
RedHat8x86_64dotnet-apphost-pack-3.1< 3.1.4-2.el8_2dotnet-apphost-pack-3.1-3.1.4-2.el8_2.x86_64.rpm
RedHat8x86_64aspnetcore-targeting-pack-3.1< 3.1.4-2.el8_2aspnetcore-targeting-pack-3.1-3.1.4-2.el8_2.x86_64.rpm
RedHat8x86_64dotnet3.1-debuginfo< 3.1.104-2.el8_2dotnet3.1-debuginfo-3.1.104-2.el8_2.x86_64.rpm
RedHat8x86_64dotnet-runtime-3.1< 3.1.4-2.el8_2dotnet-runtime-3.1-3.1.4-2.el8_2.x86_64.rpm
RedHat8x86_64aspnetcore-runtime-3.1< 3.1.4-2.el8_2aspnetcore-runtime-3.1-3.1.4-2.el8_2.x86_64.rpm
RedHat8x86_64dotnet< 3.1.104-2.el8_2dotnet-3.1.104-2.el8_2.x86_64.rpm
RedHat8x86_64dotnet-targeting-pack-3.1< 3.1.4-2.el8_2dotnet-targeting-pack-3.1-3.1.4-2.el8_2.x86_64.rpm
Rows per page:
1-10 of 181

Related

nessus 30
redhat 7
oraclelinux 4
openvas 13
osv 7
cve 2
github 2
mscve 2
redhatcve 2
veracode 2
prion 2
kaspersky 1
mskb 19
altlinux 8
photon 2
avleonov 1
nessus
nessus
Security Updates for Microsoft Visual Studio Products (May 2020)
2020-05-12 00:00:00
RHEL 7 : .NET Core on Red Hat Enterprise Linux (RHSA-2020:2249)
2023-01-23 00:00:00
RHEL 8 : dotnet3.1 (RHSA-2020:2250)
2020-05-22 00:00:00
redhat
redhat
(RHSA-2020:2249) Important: .NET Core on Red Hat Enterprise Linux security and bug fix update
2020-05-21 15:09:36
(RHSA-2020:2146) Important: .NET Core on Red Hat Enterprise Linux security and bug fix update
2020-05-13 16:38:56
(RHSA-2020:2475) Important: .NET Core on Red Hat Enterprise Linux 7 security update
2020-06-10 09:19:59
oraclelinux
oraclelinux
dotnet3.1 security update
2020-06-09 00:00:00
.NET Core on Red Hat Enterprise Linux 8 security update
2020-06-12 00:00:00
.NET Core security update
2020-05-13 00:00:00
openvas
openvas
.NET Core SDK DoS Vulnerability-01 (May 2020)
2020-05-13 00:00:00
.NET Core DoS Vulnerability-01 (May 2020)
2020-05-13 00:00:00
.NET Core SDK DoS Vulnerability (May 2020)
2020-05-13 00:00:00
osv
osv
CVE-2020-1161
2020-05-21 23:15:17
ASP.NET Core Denial of Service Vulnerability
2022-05-24 17:18:32
BIT-aspnet-core-2020-1161
2024-03-06 10:53:59
cve
cve
CVE-2020-1161
2020-05-21 23:15:00
CVE-2020-1108
2020-05-21 23:15:00
github
github
ASP.NET Core Denial of Service Vulnerability
2022-05-24 17:18:32
.NET Core & .NET Framework Denial of Service Vulnerability
2022-05-24 17:18:28
mscve
mscve
ASP.NET Core Denial of Service Vulnerability
2020-05-12 07:00:00
.NET Core & .NET Framework Denial of Service Vulnerability
2020-05-12 07:00:00
redhatcve
redhatcve
CVE-2020-1161
2020-05-12 19:11:06
CVE-2020-1108
2022-05-14 11:39:23
veracode
veracode
Denial Of Service (DoS)
2020-05-15 03:39:01
Denial Of Service (DoS)
2020-05-14 03:09:47
prion
prion
Denial of service
2020-05-21 23:15:00
Denial of service
2020-05-21 23:15:00
kaspersky
kaspersky
KLA11772 Multiple vulnerabilities in Microsoft Developer Tools
2020-05-12 00:00:00
mskb
mskb
May 12, 2020-KB4552931 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1903 and Windows Server 1903 RTM and Windows 10, version 1909 and Windows Server, version 1909
2020-05-12 07:00:00
May 12, 2020-KB4552925 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 2004
2020-05-11 00:00:00
Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1 and Windows Server 2012 R2 (KB4556405)
2020-05-12 07:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.6-alt1
2020-08-02 00:00:00
Security fix for the ALT Linux 9 package dotnet-coreclr-3.1 version 3.1.6-alt1
2020-08-03 00:00:00
Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.6-alt1
2020-08-03 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2020-0151
2020-10-13 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0151
2020-10-13 00:00:00
avleonov
avleonov
Microsoft Patch Tuesday May 2020: comments from VM vendors, promising stuff for phishing, troubles with SharePoint and lulz with Visual Studio
2020-05-13 00:49:16

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

49.8%

JSON
Related for RHSA-2020:2250
nessus30redhat7oraclelinux4openvas13osv7cve2github2mscve2redhatcve2veracode2prion2kaspersky1mskb19altlinux8photon2avleonov1