RedHatRHSA-2021:3145(RHSA-2021:3145) Low: .NET Core 2.1 security and bugfix update
5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
29.0%
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 2.1.525 and .NET Core Runtime 2.1.29.
Security Fix(es):
- dotnet: Dump file created world-readable (CVE-2021-34485)
Default inclusions for applications built with .NET Core have been updated to reference the newest versions and their security fixes.
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | x86_64 | dotnet-sdk-2.1.5xx-debuginfo | < 2.1.525-1.el8_4 | dotnet-sdk-2.1.5xx-debuginfo-2.1.525-1.el8_4.x86_64.rpm |
| RedHat | 8 | x86_64 | dotnet-runtime-2.1 | < 2.1.29-1.el8_4 | dotnet-runtime-2.1-2.1.29-1.el8_4.x86_64.rpm |
| RedHat | 8 | x86_64 | dotnet-debugsource | < 2.1.525-1.el8_4 | dotnet-debugsource-2.1.525-1.el8_4.x86_64.rpm |
| RedHat | 8 | x86_64 | dotnet-host-fxr-2.1-debuginfo | < 2.1.29-1.el8_4 | dotnet-host-fxr-2.1-debuginfo-2.1.29-1.el8_4.x86_64.rpm |
| RedHat | 8 | x86_64 | dotnet-debuginfo | < 2.1.525-1.el8_4 | dotnet-debuginfo-2.1.525-1.el8_4.x86_64.rpm |
| RedHat | 8 | x86_64 | dotnet-host-fxr-2.1 | < 2.1.29-1.el8_4 | dotnet-host-fxr-2.1-2.1.29-1.el8_4.x86_64.rpm |
| RedHat | 8 | x86_64 | dotnet-runtime-2.1-debuginfo | < 2.1.29-1.el8_4 | dotnet-runtime-2.1-debuginfo-2.1.29-1.el8_4.x86_64.rpm |
| RedHat | 8 | x86_64 | dotnet-sdk-2.1.5xx | < 2.1.525-1.el8_4 | dotnet-sdk-2.1.5xx-2.1.525-1.el8_4.x86_64.rpm |
| RedHat | 8 | x86_64 | dotnet-sdk-2.1 | < 2.1.525-1.el8_4 | dotnet-sdk-2.1-2.1.525-1.el8_4.x86_64.rpm |
Related
5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
29.0%