Fluid Attacks Database

Description

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel10	dotnet10.0	<0:10.0.113-1.el10_2	0:10.0.113-1.el10_2
rpm rhel8	dotnet10.0	<0:10.0.113-1.el8_10	0:10.0.113-1.el8_10
rpm rhel9	dotnet10.0	<0:10.0.113-1.el9_8	0:10.0.113-1.el9_8
rpm rhel10	dotnet8.0	<0:8.0.132-1.el10_2	0:8.0.132-1.el10_2
rpm rhel8	dotnet8.0	<0:8.0.132-2.el8_10	0:8.0.132-2.el8_10
rpm rhel9	dotnet8.0	<0:8.0.132-1.el9_8	0:8.0.132-1.el9_8
rpm rhel10	dotnet9.0	<0:9.0.122-1.el10_2	0:9.0.122-1.el10_2
rpm rhel8	dotnet9.0	<0:9.0.122-1.el8_10	0:9.0.122-1.el8_10
rpm rhel9	dotnet9.0	<0:9.0.122-1.el9_8	0:9.0.122-1.el9_8

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.