FLAT-90O9I – Vulnerability | Fluid Attacks Database

Database

Description

privilege escalation

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
nuget	dotnet	>=5.0 <=5.0.5 \|\| >=3.1 <=3.1.14	-
rpm rhel8	dotnet3.1	<0:3.1.115-1.el8_4	0:3.1.115-1.el8_4
rpm rhel8	dotnet5.0	<0:5.0.203-1.el8_4	0:5.0.203-1.el8_4
alpm rolling_release	dotnet-sdk	>=5.0.5.sdk202-1 <5.0.6.sdk203-1	5.0.6.sdk203-1
alpm rolling_release	dotnet-runtime	>=5.0.5.sdk202-1 <5.0.6.sdk203-1	5.0.6.sdk203-1

Aliases

1. CVE-2021-312042. NVD-2021-312043. OSV-2021-312044. GCVE-2021-31204

References

1. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F3VM3RMPE7PNNLLI3BPCSAXITQZCFCA/2. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M7KL3KTHJVQNRA3CWFUTESQJARQEHSZ/3. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVMWZPF4FR6JPFSNAIDIUDULHZJBVCW6/4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFXJPQUYUITJMV75YN3XIGE3KKN5GOCU/5. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UV4ITB3SUDGR23G7XALUVKFJMZERFUKF/6. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWF25Z3CZ6LYCOHZ7FPSFAQ426JUBUZ4/7. https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.