Skip to content
OpenAdvisories
High RHSA-2018:0379 1 CVE

Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · Rhel Dotnet 1 rhel_dotnet:1.0::el7 rh-dotnetcore10-dotnetcore 0:1.0.9-1.el7
Red Hat · Rhel Dotnet 1 rhel_dotnet:1.0::el7 rh-dotnetcore10-dotnetcore-debuginfo 0:1.0.9-1.el7
Red Hat · Rhel Dotnet 1 rhel_dotnet:1.1::el7 rh-dotnetcore11-dotnetcore 0:1.1.6-1.el7
Red Hat · Rhel Dotnet 1 rhel_dotnet:1.1::el7 rh-dotnetcore11-dotnetcore-debuginfo 0:1.1.6-1.el7
Red Hat · Rhel Dotnet 2 rhel_dotnet:2.0::el7 rh-dotnet20-dotnet 0:2.0.5-1.el7
Red Hat · Rhel Dotnet 2 rhel_dotnet:2.0::el7 rh-dotnet20-dotnet-debuginfo 0:2.0.5-1.el7
Red Hat · Rhel Dotnet 2 rhel_dotnet:2.0::el7 rh-dotnet20-dotnet-host 0:2.0.5-1.el7
Red Hat · Rhel Dotnet 2 rhel_dotnet:2.0::el7 rh-dotnet20-dotnet-runtime-2.0 0:2.0.5-1.el7
Red Hat · Rhel Dotnet 2 rhel_dotnet:2.0::el7 rh-dotnet20-dotnet-sdk-2.1 0:2.1.4-1.el7

Vulnerabilities 1

  • High 7.5
    CVE-2018-0764

    Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents

    Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vu…

    Microsoft .NET Framework and .NET Core System.Security.Cryptography.Xml NuGet

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://github.com/dotnet/announcements/issues/52
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1533730
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0379.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-0764
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-0764
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-0764