Описание
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Hardened Images | hi/dotnet-runtime | Not affected | ||
| Red Hat Hardened Images | hi/dotnet-sdk | Not affected | ||
| Red Hat Enterprise Linux 10 | dotnet8.0 | Fixed | RHSA-2026:41893 | 20.07.2026 |
| Red Hat Enterprise Linux 10 | dotnet9.0 | Fixed | RHSA-2026:41895 | 20.07.2026 |
| Red Hat Enterprise Linux 10 | dotnet10.0 | Fixed | RHSA-2026:41897 | 20.07.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | dotnet8.0 | Fixed | RHSA-2026:58566 | 24.08.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | dotnet9.0 | Fixed | RHSA-2026:58567 | 24.08.2026 |
| Red Hat Enterprise Linux 8 | dotnet9.0 | Fixed | RHSA-2026:41899 | 20.07.2026 |
| Red Hat Enterprise Linux 8 | dotnet10.0 | Fixed | RHSA-2026:41900 | 20.07.2026 |
| Red Hat Enterprise Linux 8 | dotnet8.0 | Fixed | RHSA-2026:41901 | 20.07.2026 |
Показывать по
10
Дополнительная информация
Статус:
Important
Дефект:
CWE-770
https://bugzilla.redhat.com/show_bug.cgi?id=2499217dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM
EPSS
Процентиль: 56%
0.0084
Низкий
7.5 High
CVSS3
Связанные уязвимости
CVSS3: 7.5
ubuntu
2 месяца назад
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVSS3: 7.5
nvd
2 месяца назад
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVSS3: 7.5
github
около 2 месяцев назад
Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability
EPSS
Процентиль: 56%
0.0084
Низкий
7.5 High
CVSS3