Описание
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Отчет
This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker can exploit HTTP/2 header parsing flaws over network connections without privileges or user interaction, potentially leading to security control bypasses and HTTP request smuggling. ASP.NET Core applications running on Red Hat Enterprise Linux that use Kestrel as a public-facing web server handling HTTP/2 connections are directly exposed. Services utilizing HTTP/1.1 exclusively or processing pre-validated traffic are not exposed to the specific HTTP/2 HPACK parsing flaws.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Hardened Images | dotnet10.0 | Not affected | ||
| Red Hat Hardened Images | dotnet8.0 | Not affected | ||
| Red Hat Hardened Images | dotnet9.0 | Not affected | ||
| Red Hat Enterprise Linux 10 | dotnet8.0 | Fixed | RHSA-2026:86168 | 20.10.2026 |
| Red Hat Enterprise Linux 10 | dotnet9.0 | Fixed | RHSA-2026:86172 | 20.10.2026 |
| Red Hat Enterprise Linux 10 | dotnet10.0 | Fixed | RHSA-2026:86195 | 20.10.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | dotnet9.0 | Fixed | RHSA-2026:88424 | 22.10.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | dotnet8.0 | Fixed | RHSA-2026:88474 | 22.10.2026 |
| Red Hat Enterprise Linux 8 | dotnet9.0 | Fixed | RHSA-2026:86170 | 20.10.2026 |
| Red Hat Enterprise Linux 8 | dotnet10.0 | Fixed | RHSA-2026:86192 | 20.10.2026 |
Показывать по
Дополнительная информация
Статус:
9.1 Critical
CVSS3
Связанные уязвимости
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability
9.1 Critical
CVSS3