Summary
James Newton-King discovered that .NET did not properly limit resource
allocation when handling certain HTTP/3 requests. An attacker could
possibly use this issue to cause a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | dotnet8 | 8.0.115-8.0.15-0ubuntu1~22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | dotnet8 | 8.0.115-8.0.15-0ubuntu1~24.04.1 |
Vulnerabilities 1
-
High 7.5
ASP.NET Core and Visual Studio Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
References
-
report
https://ubuntu.com/security/CVE-2025-26682