CVE-2026-50648

Опубликовано: 14 июл. 2026

Источник: redhat

CVSS3: 7.5

Описание

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

A flaw was found in .NET Framework. An unauthorized attacker can exploit this vulnerability remotely by causing the system to allocate resources without proper limits or throttling. This uncontrolled resource allocation can lead to a Denial of Service (DoS), making the affected system unresponsive or unavailable to legitimate users.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat OpenShift Dev Spaces	devspaces/udi-rhel9	Not affected
Red Hat Enterprise Linux 10	dotnet8.0	Fixed	RHSA-2026:41893	20.07.2026
Red Hat Enterprise Linux 10	dotnet9.0	Fixed	RHSA-2026:41895	20.07.2026
Red Hat Enterprise Linux 10	dotnet10.0	Fixed	RHSA-2026:41897	20.07.2026
Red Hat Enterprise Linux 10.0 Extended Update Support	dotnet8.0	Fixed	RHSA-2026:58566	24.08.2026
Red Hat Enterprise Linux 10.0 Extended Update Support	dotnet9.0	Fixed	RHSA-2026:58567	24.08.2026
Red Hat Enterprise Linux 8	dotnet9.0	Fixed	RHSA-2026:41899	20.07.2026
Red Hat Enterprise Linux 8	dotnet10.0	Fixed	RHSA-2026:41900	20.07.2026
Red Hat Enterprise Linux 8	dotnet8.0	Fixed	RHSA-2026:41901	20.07.2026
Red Hat Enterprise Linux 9	dotnet8.0	Fixed	RHSA-2026:41894	20.07.2026

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Important

Дефект:

CWE-770

https://bugzilla.redhat.com/show_bug.cgi?id=2500587dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation

7.5 High

CVSS3

Связанные уязвимости

CVE-2026-50648

CVSS3: 7.5

ubuntu

2 месяца назад

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

CVE-2026-50648

CVSS3: 7.5

nvd

2 месяца назад

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

CVE-2026-50648

CVSS3: 7.5

msrc

2 месяца назад

.NET Framework Denial of Service Vulnerability

GHSA-23rf-6693-g89p

CVSS3: 7.5

github

около 2 месяцев назад

Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability

BDU:2026-09820

CVSS3: 7.5

fstec

2 месяца назад

Уязвимость программной платформы Microsoft .NET и Microsoft .NET Framework, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

7.5 High

CVSS3