Описание
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
A remote code execution vulnerability was found in .NET. This flaw allows an attacker to load a specially crafted file in .NET.
Отчет
This issue affects .NET Framework as shipped with all versions of RHEL. However, this flaw is not known to be exploitable under any supported scenario.
Меры по смягчению последствий
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 9 | dotnet6.0 | Not affected | ||
| Red Hat Enterprise Linux 9 | dotnet7.0 | Not affected | ||
| Red Hat Enterprise Linux 8 | dotnet8.0 | Fixed | RHSA-2025:0381 | 16.01.2025 |
| Red Hat Enterprise Linux 8 | dotnet9.0 | Fixed | RHSA-2025:0382 | 16.01.2025 |
| Red Hat Enterprise Linux 9 | dotnet8.0 | Fixed | RHBA-2025:0304 | 14.01.2025 |
| Red Hat Enterprise Linux 9 | dotnet9.0 | Fixed | RHBA-2025:0305 | 14.01.2025 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | dotnet8.0 | Fixed | RHSA-2025:0532 | 21.01.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
8.8 High
CVSS3
Связанные уязвимости
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability
Уязвимость программных платформ Microsoft .NET Framework, .NET и средства разработки программного обеспечения Microsoft Visual Studio, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код
EPSS
8.8 High
CVSS3