Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Rhel Dotnet 1 rhel_dotnet:1.0::el7 | rh-dotnetcore10-dotnetcore | 0:1.0.8-1.el7 |
| Red Hat · Rhel Dotnet 1 rhel_dotnet:1.0::el7 | rh-dotnetcore10-dotnetcore-debuginfo | 0:1.0.8-1.el7 |
| Red Hat · Rhel Dotnet 1 rhel_dotnet:1.1::el7 | rh-dotnetcore11-dotnetcore | 0:1.1.5-1.el7 |
| Red Hat · Rhel Dotnet 1 rhel_dotnet:1.1::el7 | rh-dotnetcore11-dotnetcore-debuginfo | 0:1.1.5-1.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.0::el7 | rh-dotnet20-dotnet | 0:2.0.3-4.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.0::el7 | rh-dotnet20-dotnet-debuginfo | 0:2.0.3-4.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.0::el7 | rh-dotnet20-dotnet-host | 0:2.0.3-4.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.0::el7 | rh-dotnet20-dotnet-runtime-2.0 | 0:2.0.3-4.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.0::el7 | rh-dotnet20-dotnet-sdk-2.0 | 0:2.0.3-4.el7 |
Vulnerabilities 2
-
High 7.5
Improper Certificate Validation
.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles p…
-
High 7.5
Improper Input Validation in Microsoft.NETCore.App
Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resulting in denial of service, aka .NET Denial of Service Vulnerability.
References
-
article
https://access.redhat.com/security/updates/classification/#low
-
article
https://github.com/dotnet/announcements/issues/34
-
article
https://github.com/dotnet/announcements/issues/44
-
article
https://github.com/dotnet/core/blob/master/release-notes/2.0/2.0.3.md
-
article
https://github.com/dotnet/core/blob/master/release-notes/1.1/1.1.5.md
-
article
https://github.com/dotnet/core/blob/master/release-notes/1.0/1.0.8.md
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1512982
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1512992
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3248.json
-
report
https://access.redhat.com/security/cve/CVE-2017-8585
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-8585
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-8585
-
article
https://www.sidertia.com/Home/Community/Blog/2017/07/14/Microsoft-fixes-the-CVE-2017-8585-security-vulnerability-discovered-by-Sidertia-Team
-
report
https://access.redhat.com/security/cve/CVE-2017-11770
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-11770
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-11770