Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2022:5061
HistoryJun 15, 2022 - 2:49 p.m.

(RHSA-2022:5061) Moderate: .NET Core 3.1 security and bugfix update

2022-06-1514:49:11
access.redhat.com
14

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.6%

JSON

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 3.1.420 and .NET Runtime 3.1.26.

Security Fix(es):

  • dotnet: NuGet Credential leak due to loss of control of third party symbol server domain (CVE-2022-30184)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64dotnet3.1-debuginfo< 3.1.420-1.el8_6dotnet3.1-debuginfo-3.1.420-1.el8_6.x86_64.rpm
RedHat8x86_64dotnet-hostfxr-3.1-debuginfo< 3.1.26-1.el8_6dotnet-hostfxr-3.1-debuginfo-3.1.26-1.el8_6.x86_64.rpm
RedHat8x86_64dotnet-templates-3.1< 3.1.420-1.el8_6dotnet-templates-3.1-3.1.420-1.el8_6.x86_64.rpm
RedHat8x86_64aspnetcore-runtime-3.1< 3.1.26-1.el8_6aspnetcore-runtime-3.1-3.1.26-1.el8_6.x86_64.rpm
RedHat8x86_64dotnet-sdk-3.1-debuginfo< 3.1.420-1.el8_6dotnet-sdk-3.1-debuginfo-3.1.420-1.el8_6.x86_64.rpm
RedHat8x86_64dotnet3.1-debugsource< 3.1.420-1.el8_6dotnet3.1-debugsource-3.1.420-1.el8_6.x86_64.rpm
RedHat8x86_64dotnet-hostfxr-3.1< 3.1.26-1.el8_6dotnet-hostfxr-3.1-3.1.26-1.el8_6.x86_64.rpm
RedHat8x86_64dotnet-apphost-pack-3.1< 3.1.26-1.el8_6dotnet-apphost-pack-3.1-3.1.26-1.el8_6.x86_64.rpm
RedHat8x86_64dotnet-sdk-3.1-source-built-artifacts< 3.1.420-1.el8_6dotnet-sdk-3.1-source-built-artifacts-3.1.420-1.el8_6.x86_64.rpm
RedHat8x86_64dotnet-runtime-3.1< 3.1.26-1.el8_6dotnet-runtime-3.1-3.1.26-1.el8_6.x86_64.rpm
Rows per page:
1-10 of 151

Related

redhat 4
mskb 2
github 1
prion 1
kaspersky 1
fedora 2
osv 5
nessus 14
oraclelinux 3
openvas 3
rocky 2
alpinelinux 1
cve 1
veracode 1
mscve 1
redhatcve 1
altlinux 5
ics 1
ibm 1
rapid7blog 1
redhat
redhat
(RHSA-2022:5047) Moderate: .NET 6.0 on RHEL 7 security and bugfix update
2022-06-15 07:46:52
(RHSA-2022:5046) Moderate: .NET 6.0 security and bugfix update
2022-06-15 07:46:48
(RHSA-2022:5062) Moderate: .NET Core 3.1 on RHEL 7 security and bugfix update
2022-06-15 14:51:04
mskb
mskb
.NET 6.0 Update: June 14, 2022 (KB5015429)
2022-06-14 07:00:00
.NET Core 3.1 Update: June 14, 2022 (KB5015424)
2022-06-14 07:00:00
github
github
Potential leak of NuGet.org API key
2022-06-14 21:57:52
prion
prion
Information disclosure
2022-06-15 22:15:00
kaspersky
kaspersky
KLA12563 OSI vulnerability in Microsoft Developer Tools
2022-06-14 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: dotnet3.1-3.1.420-1.fc35
2022-07-07 01:18:12
[SECURITY] Fedora 36 Update: dotnet3.1-3.1.420-1.fc36
2022-07-07 01:16:29
osv
osv
BIT-dotnet-sdk-2022-30184
2024-03-06 10:57:55
Moderate: .NET 6.0 security and bugfix update
2022-06-15 07:46:48
Potential leak of NuGet.org API key
2022-06-14 21:57:52
nessus
nessus
RHEL 9 : .NET 6.0 (RHSA-2022:5050)
2022-06-16 00:00:00
RHEL 7 : .NET Core 3.1 on RHEL 7 (RHSA-2022:5062)
2022-06-16 00:00:00
Rocky Linux 8 : .NET Core 3.1 (RLSA-2022:5061)
2022-07-08 00:00:00
oraclelinux
oraclelinux
.NET Core 3.1 security and bugfix update
2022-06-15 00:00:00
.NET 6.0 security and bugfix update
2022-06-30 00:00:00
.NET 6.0 security and bugfix update
2022-06-16 00:00:00
openvas
openvas
.NET Core Information Disclosure Vulnerability (KB5015424)
2022-06-15 00:00:00
Fedora: Security Advisory for dotnet3.1 (FEDORA-2022-cd37732349)
2022-07-08 00:00:00
Fedora: Security Advisory for dotnet3.1 (FEDORA-2022-5508547b1e)
2022-07-08 00:00:00
rocky
rocky
.NET Core 3.1 security and bugfix update
2022-06-15 14:49:11
.NET 6.0 security and bugfix update
2022-06-15 07:46:48
alpinelinux
alpinelinux
CVE-2022-30184
2022-06-15 22:15:00
cve
cve
CVE-2022-30184
2022-06-15 22:15:00
veracode
veracode
Information Disclosure
2022-06-15 05:58:53
mscve
mscve
.NET and Visual Studio Information Disclosure Vulnerability
2022-06-14 07:00:00
redhatcve
redhatcve
CVE-2022-30184
2022-06-14 17:33:30
altlinux
altlinux
Security fix for the ALT Linux 10 package dotnet-runtime-7.0 version 6.0.7-alt1
2022-08-05 00:00:00
Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.26-alt1
2023-02-20 00:00:00
Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.26-alt1
2023-02-20 00:00:00
ics
ics
Siemens PNI
2023-11-16 12:00:00
ibm
ibm
Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak
2022-08-25 02:03:35
rapid7blog
rapid7blog
Patch Tuesday - June 2022
2022-06-14 19:37:50

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.6%

JSON
Related for RHSA-2022:5061
redhat4mskb2github1prion1kaspersky1fedora2osv5nessus14oraclelinux3openvas3rocky2alpinelinux1cve1veracode1mscve1redhatcve1altlinux5ics1ibm1rapid7blog1