Описание
.NET Denial of Service Vulnerability
A vulnerability was found in dotnet. This flaw occurs when parsing an empty HTTP response as a JSON.NET JObject that causes a stack overflow and crashes a process.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| .NET Core 3.1 on Red Hat Enterprise Linux | rh-dotnet31-dotnet | Not affected | ||
| .NET Core 5.0 on Red Hat Enterprise Linux | rh-dotnet50-dotnet | Not affected | ||
| Red Hat Enterprise Linux 8 | dotnet7.0 | Not affected | ||
| Red Hat Enterprise Linux 9 | dotnet7.0 | Not affected | ||
| .NET Core on Red Hat Enterprise Linux | rh-dotnet60-dotnet | Fixed | RHSA-2023:0078 | 11.01.2023 |
| Red Hat Enterprise Linux 8 | dotnet6.0 | Fixed | RHSA-2023:0079 | 11.01.2023 |
| Red Hat Enterprise Linux 9 | dotnet6.0 | Fixed | RHSA-2023:0077 | 11.01.2023 |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-121
https://bugzilla.redhat.com/show_bug.cgi?id=2158342dotnet: Parsing an empty HTTP response as a JSON.NET JObject causes a stack overflow and crashes a process
7.5 High
CVSS3
7.5 High
CVSS3