MEDIUM 6.5

GHSA-3gp9-h8hw-pxpw

Denial of service in .NET core

Details

.NET Core and Visual Studio Denial of Service Vulnerability due to a vulnerability which exists when creating HTTPS web request during X509 certificate chain building.

Are you affected?

Enter the version of the package you're using.

Affected packages

NuGet / Microsoft.NETCore.App

Introduced in: 2.1.0 Fixed in: 2.1.25

Fix dotnet add package Microsoft.NETCore.App --version 2.1.25

NuGet / Microsoft.NETCore.App.Host.linux-arm

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Host.linux-arm --version 3.1.12

NuGet / Microsoft.NETCore.App.Host.linux-arm64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Host.linux-arm64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Host.linux-musl-arm64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Host.linux-musl-arm64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Host.linux-musl-x64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Host.linux-musl-x64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Host.linux-x64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Host.linux-x64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Host.osx-x64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Host.osx-x64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Host.rhel.6-x64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Host.rhel.6-x64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Host.win-arm

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Host.win-arm --version 3.1.12

NuGet / Microsoft.NETCore.App.Host.win-arm64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Host.win-arm64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Host.win-x64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Host.win-x64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Host.win-x86

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Host.win-x86 --version 3.1.12

NuGet / Microsoft.NETCore.App.Runtime.linux-arm

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Runtime.linux-arm --version 3.1.12

NuGet / Microsoft.NETCore.App.Runtime.linux-arm64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Runtime.linux-arm64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Runtime.linux-musl-arm64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Runtime.linux-musl-x64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-x64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Runtime.linux-x64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Runtime.linux-x64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Runtime.osx-x64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Runtime.osx-x64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Runtime.rhel.6-x64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Runtime.rhel.6-x64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Runtime.win-arm

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Runtime.win-arm --version 3.1.12

NuGet / Microsoft.NETCore.App.Runtime.win-arm64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Runtime.win-arm64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Runtime.win-x64

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Runtime.win-x64 --version 3.1.12

NuGet / Microsoft.NETCore.App.Runtime.win-x86

Introduced in: 3.1.0 Fixed in: 3.1.12

Fix dotnet add package Microsoft.NETCore.App.Runtime.win-x86 --version 3.1.12

NuGet / Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64