MEDIUM 6.5

GHSA-5633-f33j-c6f7

Tampering vulnerability in .NET Core

상세

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

NuGet / Microsoft.NETCore.App

최초 영향 버전: 2.1.0 수정 버전: 2.1.7

수정 dotnet add package Microsoft.NETCore.App --version 2.1.7

참고

https://nvd.nist.gov/vuln/detail/CVE-2018-8416 [ADVISORY]
https://github.com/dotnet/announcements/issues/95 [WEB]
https://github.com/github/advisory-database/issues/302 [WEB]
https://access.redhat.com/errata/RHSA-2018:3676 [WEB]
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8416 [WEB]