RHSA-2020:2475HighCVSS 7.5

Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux 7 security update

Published
June 10, 2020
Last Modified
August 19, 2026

🔗 CVE IDs covered (1)

CVE-2020-1108 →

📋 Description

CVE-2020-1108 — dotnet: Denial of service via untrusted input

🎯 Affected products42

  • .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet31-dotnet-0:3.1.105-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet31-dotnet-0:3.1.105-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet31-dotnet-0:3.1.105-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet31-dotnet-0:3.1.105-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet31-dotnet-0:3.1.105-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet31-dotnet-0:3.1.105-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet31-dotnet-debuginfo-0:3.1.105-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet31-dotnet-debuginfo-0:3.1.105-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet31-dotnet-debuginfo-0:3.1.105-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet31-dotnet-host-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet31-dotnet-host-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet31-dotnet-host-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet31-dotnet-runtime-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet31-dotnet-runtime-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet31-dotnet-runtime-3.1-0:3.1.5-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • +12 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (4)