Description
.NET Core and Visual Studio Information Disclosure Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | PowerShell 7.1 | 7.1.0 – < 7.1.5 | 7.1.5 |
| Microsoft | Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) | 15.0.0 – < 16.9.12 | 16.9.12 |
| Microsoft | Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) | 16.11.0 – < 16.11.5 | 16.11.5 |
| Microsoft | .NET 5.0 | 5.0.0 – < 5.0.11 | 5.0.11 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | dotnet +4 | 5.0.208-1.el8_4 | RHSA-2021:3819 |
| RHEL 8 | dotnet-host +6 | 5.0.11-1.el8_4 | RHSA-2021:3819 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Dotnet 5 | rh-dotnet50-dotnet +4 | 5.0.208-1.el7_9 | RHSA-2021:3818 |
| Red Hat Rhel Dotnet 5 | rh-dotnet50-dotnet-host +6 | 5.0.11-1.el7_9 | RHSA-2021:3818 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | dotnet-hostfxr-5.0 +5 | 5.0.11-1.el8_4 | ALSA-2021:3819 |
| AlmaLinux 8 | dotnet-sdk-5.0 +1 | 5.0.208-1.el8_4 | ALSA-2021:3819 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | dotnet +3 | 5.0.208-1.0.1.el8_4 | ELSA-2021-3819 |
| Oracle Linux 8 | dotnet-host +6 | 5.0.11-1.0.1.el8_4 | ELSA-2021-3819 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | System.DirectoryServices.Protocols | < 5.0.1 | 5.0.1 | GHSA-9cxh-gqpx-qc5m |
Advisories 4
- ALSA-2021:3819 Important: .NET 5.0 security and bugfix update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2021:3818 Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2021:3819 Red Hat Security Advisory: .NET 5.0 security and bugfix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- ELSA-2021-3819 Important: .NET 5.0 security and bugfix update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 2, 2021