Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-50525

Опубликовано: 14 июл. 2026
Источник: redhat
CVSS3: 7.5

Описание

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service (DoS). An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash. This can disrupt the availability of services running on the .NET framework.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenShift Dev Spacesdevspaces/udi-rhel9Not affected
Red Hat Enterprise Linux 10dotnet8.0FixedRHSA-2026:4189320.07.2026
Red Hat Enterprise Linux 10dotnet9.0FixedRHSA-2026:4189520.07.2026
Red Hat Enterprise Linux 10dotnet10.0FixedRHSA-2026:4189720.07.2026
Red Hat Enterprise Linux 8dotnet9.0FixedRHSA-2026:4189920.07.2026
Red Hat Enterprise Linux 8dotnet10.0FixedRHSA-2026:4190020.07.2026
Red Hat Enterprise Linux 8dotnet8.0FixedRHSA-2026:4190120.07.2026
Red Hat Enterprise Linux 9dotnet8.0FixedRHSA-2026:4189420.07.2026
Red Hat Enterprise Linux 9dotnet9.0FixedRHSA-2026:4189620.07.2026
Red Hat Enterprise Linux 9dotnet10.0FixedRHSA-2026:4189820.07.2026

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-770
https://bugzilla.redhat.com/show_bug.cgi?id=2500580dotnet: .NET: Denial of Service due to uncontrolled resource allocation

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
2 месяца назад

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVSS3: 7.5
nvd
2 месяца назад

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVSS3: 7.5
msrc
2 месяца назад

.NET Denial of Service Vulnerability

CVSS3: 7.5
redos
около 2 месяцев назад

Уязвимость dotnet10.0

CVSS3: 7.5
github
около 2 месяцев назад

Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability

7.5 High

CVSS3