Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-0820
Vulnerability from cvelistv5
Published
2019-05-16 18:17
Modified
2024-08-04 17:58
Severity ?
EPSS score ?
Summary
A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| secure@microsoft.com | https://access.redhat.com/errata/RHSA-2019:1259 | Third Party Advisory | |
| secure@microsoft.com | https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820 | Patch, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2019:1259 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820 | Patch, Vendor Advisory |
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | Microsoft | Microsoft .NET Framework 4.5.2 |
Version: Windows 7 for 32-bit Systems Service Pack 1 Version: Windows 7 for x64-based Systems Service Pack 1 Version: Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Version: Windows Server 2008 R2 for x64-based Systems Service Pack 1 Version: Windows Server 2012 Version: Windows Server 2012 (Server Core installation) Version: Windows 8.1 for 32-bit systems Version: Windows 8.1 for x64-based systems Version: Windows Server 2012 R2 Version: Windows RT 8.1 Version: Windows Server 2012 R2 (Server Core installation) Version: Windows Server 2008 for 32-bit Systems Service Pack 2 Version: Windows Server 2008 for x64-based Systems Service Pack 2 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T17:58:59.792Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
},
{
"name": "RHSA-2019:1259",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Microsoft .NET Framework 4.5.2",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "Windows 7 for 32-bit Systems Service Pack 1"
},
{
"status": "affected",
"version": "Windows 7 for x64-based Systems Service Pack 1"
},
{
"status": "affected",
"version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
},
{
"status": "affected",
"version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
},
{
"status": "affected",
"version": "Windows Server 2012"
},
{
"status": "affected",
"version": "Windows Server 2012 (Server Core installation)"
},
{
"status": "affected",
"version": "Windows 8.1 for 32-bit systems"
},
{
"status": "affected",
"version": "Windows 8.1 for x64-based systems"
},
{
"status": "affected",
"version": "Windows Server 2012 R2"
},
{
"status": "affected",
"version": "Windows RT 8.1"
},
{
"status": "affected",
"version": "Windows Server 2012 R2 (Server Core installation)"
},
{
"status": "affected",
"version": "Windows Server 2008 for 32-bit Systems Service Pack 2"
},
{
"status": "affected",
"version": "Windows Server 2008 for x64-based Systems Service Pack 2"
}
]
},
{
"product": "Microsoft .NET Framework 4.6",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "Windows Server 2008 for 32-bit Systems Service Pack 2"
},
{
"status": "affected",
"version": "Windows Server 2008 for x64-based Systems Service Pack 2"
}
]
},
{
"product": ".NET Core",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "1"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "2.1"
},
{
"status": "affected",
"version": "2.2"
}
]
},
{
"product": "Microsoft .NET Framework 4.7.2",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "Windows 10 Version 1803 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1803 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows Server, version 1803 (Server Core Installation)"
},
{
"status": "affected",
"version": "Windows 10 Version 1803 for ARM64-based Systems"
},
{
"status": "affected",
"version": "Windows Server 2019"
},
{
"status": "affected",
"version": "Windows Server 2019 (Server Core installation)"
}
]
},
{
"product": "Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "Windows 7 for 32-bit Systems Service Pack 1"
},
{
"status": "affected",
"version": "Windows 7 for x64-based Systems Service Pack 1"
},
{
"status": "affected",
"version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
},
{
"status": "affected",
"version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
},
{
"status": "affected",
"version": "Windows Server 2012"
},
{
"status": "affected",
"version": "Windows Server 2012 (Server Core installation)"
},
{
"status": "affected",
"version": "Windows 8.1 for 32-bit systems"
},
{
"status": "affected",
"version": "Windows 8.1 for x64-based systems"
},
{
"status": "affected",
"version": "Windows Server 2012 R2"
},
{
"status": "affected",
"version": "Windows RT 8.1"
},
{
"status": "affected",
"version": "Windows Server 2012 R2 (Server Core installation)"
}
]
},
{
"product": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "Windows Server 2016"
},
{
"status": "affected",
"version": "Windows Server 2016 (Server Core installation)"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows Server 2012",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows Server 2012 R2",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows RT 8.1",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows Server 2016",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1703 for 32-bit Systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1703 for x64-based Systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1809 for 32-bit Systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1809 for x64-based Systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows Server 2019",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows Server 2019 (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1903 for 32-bit Systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1903 for x64-based Systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 4.8 on Windows Server, version 1903 (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 3.5",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "Windows Server 2012"
},
{
"status": "affected",
"version": "Windows Server 2012 (Server Core installation)"
},
{
"status": "affected",
"version": "Windows 8.1 for 32-bit systems"
},
{
"status": "affected",
"version": "Windows 8.1 for x64-based systems"
},
{
"status": "affected",
"version": "Windows Server 2012 R2"
},
{
"status": "affected",
"version": "Windows Server 2012 R2 (Server Core installation)"
},
{
"status": "affected",
"version": "Windows 10 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows Server 2016"
},
{
"status": "affected",
"version": "Windows 10 Version 1607 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1607 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows Server 2016 (Server Core installation)"
},
{
"status": "affected",
"version": "Windows 10 Version 1703 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1703 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1709 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1709 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1803 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1803 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows Server, version 1803 (Server Core Installation)"
},
{
"status": "affected",
"version": "Windows 10 Version 1803 for ARM64-based Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1809 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1809 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows Server 2019"
},
{
"status": "affected",
"version": "Windows Server 2019 (Server Core installation)"
},
{
"status": "affected",
"version": "Windows 10 Version 1709 for ARM64-based Systems"
}
]
},
{
"product": "Microsoft .NET Framework 3.5 on Windows 10 Version 1903 for 32-bit Systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 3.5 on Windows 10 Version 1903 for x64-based Systems",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 3.5 on Windows Server, version 1903 (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
},
{
"product": "Microsoft .NET Framework 3.0",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2"
},
{
"status": "affected",
"version": "Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"
},
{
"status": "affected",
"version": "Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"
}
]
},
{
"product": "Microsoft .NET Framework 2.0",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2"
},
{
"status": "affected",
"version": "Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"
},
{
"status": "affected",
"version": "Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"
}
]
},
{
"product": "Microsoft .NET Framework 3.5.1",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "Windows 7 for 32-bit Systems Service Pack 1"
},
{
"status": "affected",
"version": "Windows 7 for x64-based Systems Service Pack 1"
},
{
"status": "affected",
"version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
},
{
"status": "affected",
"version": "Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1"
},
{
"status": "affected",
"version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Denial of Service",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-05-22T12:06:04",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
},
{
"name": "RHSA-2019:1259",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secure@microsoft.com",
"ID": "CVE-2019-0820",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Microsoft .NET Framework 4.5.2",
"version": {
"version_data": [
{
"version_value": "Windows 7 for 32-bit Systems Service Pack 1"
},
{
"version_value": "Windows 7 for x64-based Systems Service Pack 1"
},
{
"version_value": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
},
{
"version_value": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
},
{
"version_value": "Windows Server 2012"
},
{
"version_value": "Windows Server 2012 (Server Core installation)"
},
{
"version_value": "Windows 8.1 for 32-bit systems"
},
{
"version_value": "Windows 8.1 for x64-based systems"
},
{
"version_value": "Windows Server 2012 R2"
},
{
"version_value": "Windows RT 8.1"
},
{
"version_value": "Windows Server 2012 R2 (Server Core installation)"
},
{
"version_value": "Windows Server 2008 for 32-bit Systems Service Pack 2"
},
{
"version_value": "Windows Server 2008 for x64-based Systems Service Pack 2"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.6",
"version": {
"version_data": [
{
"version_value": "Windows Server 2008 for 32-bit Systems Service Pack 2"
},
{
"version_value": "Windows Server 2008 for x64-based Systems Service Pack 2"
}
]
}
},
{
"product_name": ".NET Core",
"version": {
"version_data": [
{
"version_value": "1"
},
{
"version_value": "1.1"
},
{
"version_value": "2.1"
},
{
"version_value": "2.2"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.7.2",
"version": {
"version_data": [
{
"version_value": "Windows 10 Version 1803 for 32-bit Systems"
},
{
"version_value": "Windows 10 Version 1803 for x64-based Systems"
},
{
"version_value": "Windows Server, version 1803 (Server Core Installation)"
},
{
"version_value": "Windows 10 Version 1803 for ARM64-based Systems"
},
{
"version_value": "Windows Server 2019"
},
{
"version_value": "Windows Server 2019 (Server Core installation)"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2",
"version": {
"version_data": [
{
"version_value": "Windows 7 for 32-bit Systems Service Pack 1"
},
{
"version_value": "Windows 7 for x64-based Systems Service Pack 1"
},
{
"version_value": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
},
{
"version_value": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
},
{
"version_value": "Windows Server 2012"
},
{
"version_value": "Windows Server 2012 (Server Core installation)"
},
{
"version_value": "Windows 8.1 for 32-bit systems"
},
{
"version_value": "Windows 8.1 for x64-based systems"
},
{
"version_value": "Windows Server 2012 R2"
},
{
"version_value": "Windows RT 8.1"
},
{
"version_value": "Windows Server 2012 R2 (Server Core installation)"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"version": {
"version_data": [
{
"version_value": "Windows Server 2016"
},
{
"version_value": "Windows Server 2016 (Server Core installation)"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2012",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2012 R2",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows RT 8.1",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2016",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1703 for 32-bit Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1703 for x64-based Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1809 for 32-bit Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1809 for x64-based Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2019",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2019 (Server Core installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1903 for 32-bit Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1903 for x64-based Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server, version 1903 (Server Core installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5",
"version": {
"version_data": [
{
"version_value": "Windows Server 2012"
},
{
"version_value": "Windows Server 2012 (Server Core installation)"
},
{
"version_value": "Windows 8.1 for 32-bit systems"
},
{
"version_value": "Windows 8.1 for x64-based systems"
},
{
"version_value": "Windows Server 2012 R2"
},
{
"version_value": "Windows Server 2012 R2 (Server Core installation)"
},
{
"version_value": "Windows 10 for 32-bit Systems"
},
{
"version_value": "Windows 10 for x64-based Systems"
},
{
"version_value": "Windows Server 2016"
},
{
"version_value": "Windows 10 Version 1607 for 32-bit Systems"
},
{
"version_value": "Windows 10 Version 1607 for x64-based Systems"
},
{
"version_value": "Windows Server 2016 (Server Core installation)"
},
{
"version_value": "Windows 10 Version 1703 for 32-bit Systems"
},
{
"version_value": "Windows 10 Version 1703 for x64-based Systems"
},
{
"version_value": "Windows 10 Version 1709 for 32-bit Systems"
},
{
"version_value": "Windows 10 Version 1709 for x64-based Systems"
},
{
"version_value": "Windows 10 Version 1803 for 32-bit Systems"
},
{
"version_value": "Windows 10 Version 1803 for x64-based Systems"
},
{
"version_value": "Windows Server, version 1803 (Server Core Installation)"
},
{
"version_value": "Windows 10 Version 1803 for ARM64-based Systems"
},
{
"version_value": "Windows 10 Version 1809 for 32-bit Systems"
},
{
"version_value": "Windows 10 Version 1809 for x64-based Systems"
},
{
"version_value": "Windows Server 2019"
},
{
"version_value": "Windows Server 2019 (Server Core installation)"
},
{
"version_value": "Windows 10 Version 1709 for ARM64-based Systems"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5 on Windows 10 Version 1903 for 32-bit Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5 on Windows 10 Version 1903 for x64-based Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5 on Windows Server, version 1903 (Server Core installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.0",
"version": {
"version_data": [
{
"version_value": "Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2"
},
{
"version_value": "Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"
},
{
"version_value": "Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 2.0",
"version": {
"version_data": [
{
"version_value": "Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2"
},
{
"version_value": "Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"
},
{
"version_value": "Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5.1",
"version": {
"version_data": [
{
"version_value": "Windows 7 for 32-bit Systems Service Pack 1"
},
{
"version_value": "Windows 7 for x64-based Systems Service Pack 1"
},
{
"version_value": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
},
{
"version_value": "Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1"
},
{
"version_value": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
}
]
}
}
]
},
"vendor_name": "Microsoft"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Denial of Service"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"refsource": "MISC",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
},
{
"name": "RHSA-2019:1259",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2019-0820",
"datePublished": "2019-05-16T18:17:00",
"dateReserved": "2018-11-26T00:00:00",
"dateUpdated": "2024-08-04T17:58:59.792Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_core:1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9EDF760A-C775-457E-8091-586E56545B07\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_core:1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2F87DCF0-0552-4815-8148-C9894397C5EF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_core:2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3BF7E3F6-D3AE-404D-8F0E-0C57BF23006C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_core:2.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A5AB75F9-B0FC-46B5-A863-0458696773DB\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"42A6DF09-B8E1-414D-97E7-453566055279\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"D400E856-2B2E-4CEA-8CA5-309FDF371CEA\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F422A8C-2C4E-42C8-B420-E0728037E15C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E039CE1F-B988-4741-AE2E-5B36E2AF9688\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"21540673-614A-4D40-8BD7-3F07723803B0\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AEE2E768-0F45-46E1-B6D7-087917109D98\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"83B14968-3985-43C3-ACE5-8307196EFAE3\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7CB85C75-4D35-480E-843D-60579EC75FCB\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6B8F3DD2-A145-4AF1-8545-CC42892DA3D1\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3FB5CDAE-C713-4D9D-9D6A-2C2E8924A4BB\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CAACE735-003E-4ACB-A82E-C0CF97D7F013\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5B921FDB-8E7D-427E-82BE-4432585080CF\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB79EE26-FC32-417D-A49C-A1A63165A968\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8EDC4407-7E92-4E60-82F0-0C87D1860D3A\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*\", \"matchCriteriaId\": \"B320A104-9037-487E-BC9A-62B4A6B49FD0\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\", \"matchCriteriaId\": \"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"40B3A045-B08A-44E0-91BE-726753F6A362\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C6CE5198-C498-4672-AF4C-77AB4BE06C5C\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F422A8C-2C4E-42C8-B420-E0728037E15C\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\", \"matchCriteriaId\": \"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"280FE663-23BE-45D2-9B31-5F577E390B48\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F422A8C-2C4E-42C8-B420-E0728037E15C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"21540673-614A-4D40-8BD7-3F07723803B0\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"734112B3-1383-4BE3-8721-C0F84566B764\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"36B0E40A-84EF-4099-A395-75D6B8CDA196\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"280FE663-23BE-45D2-9B31-5F577E390B48\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FF0B660D-1F30-4D45-B98B-726EDB8CB90F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"734112B3-1383-4BE3-8721-C0F84566B764\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"36B0E40A-84EF-4099-A395-75D6B8CDA196\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C6CE5198-C498-4672-AF4C-77AB4BE06C5C\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\", \"matchCriteriaId\": \"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"36B0E40A-84EF-4099-A395-75D6B8CDA196\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"83B14968-3985-43C3-ACE5-8307196EFAE3\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7CB85C75-4D35-480E-843D-60579EC75FCB\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6B8F3DD2-A145-4AF1-8545-CC42892DA3D1\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB79EE26-FC32-417D-A49C-A1A63165A968\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"734112B3-1383-4BE3-8721-C0F84566B764\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"36B0E40A-84EF-4099-A395-75D6B8CDA196\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AEE2E768-0F45-46E1-B6D7-087917109D98\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2D3F18AF-84ED-473B-A8DF-65EB23C475AF\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AEE2E768-0F45-46E1-B6D7-087917109D98\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"83B14968-3985-43C3-ACE5-8307196EFAE3\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7CB85C75-4D35-480E-843D-60579EC75FCB\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6B8F3DD2-A145-4AF1-8545-CC42892DA3D1\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3FB5CDAE-C713-4D9D-9D6A-2C2E8924A4BB\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C6CE5198-C498-4672-AF4C-77AB4BE06C5C\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\", \"matchCriteriaId\": \"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CAACE735-003E-4ACB-A82E-C0CF97D7F013\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5B921FDB-8E7D-427E-82BE-4432585080CF\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB79EE26-FC32-417D-A49C-A1A63165A968\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4CFF558-3C47-480D-A2F0-BABF26042943\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"92BC9265-6959-4D37-BE5E-8C45E98992F8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"831F0F47-3565-4763-B16F-C87B1FF2035E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0E3F09B5-569F-4C58-9FCA-3C0953D107B5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6C3741B8-851F-475D-B428-523F4F722350\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6897676D-53F9-45B3-B27F-7FF9A4C58D33\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E28F226A-CBC7-4A32-BE58-398FA5B42481\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"76C24D94-834A-4E9D-8F73-624AFA99AAA2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B09ACF2D-D83F-4A86-8185-9569605D8EE1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AC10D919-57FD-4725-B8D2-39ECB476902F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1272DF03-7674-4BD4-8E64-94004B195448\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.\"}, {\"lang\": \"es\", \"value\": \"Existe una vulnerabilidad de Denegaci\\u00f3n de Servicio (DoS) cuando .NET Framework y .NET Core procesan inapropiadamente cadenas RegEx, conocidas como \\\".NET Framework y .NET Core Denial of Service Vulnerability\\\". Este ID de CVE es diferente de CVE-2019-0980, CVE-2019-0981.\"}]",
"id": "CVE-2019-0820",
"lastModified": "2024-11-21T04:17:20.210",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:N/A:P\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2019-05-16T19:29:00.880",
"references": "[{\"url\": \"https://access.redhat.com/errata/RHSA-2019:1259\", \"source\": \"secure@microsoft.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820\", \"source\": \"secure@microsoft.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1259\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}]",
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-400\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2019-0820\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2019-05-16T19:29:00.880\",\"lastModified\":\"2024-11-21T04:17:20.210\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.\"},{\"lang\":\"es\",\"value\":\"Existe una vulnerabilidad de Denegaci\u00f3n de Servicio (DoS) cuando .NET Framework y .NET Core procesan inapropiadamente cadenas RegEx, conocidas como \\\".NET Framework y .NET Core Denial of Service Vulnerability\\\". Este ID de CVE es diferente de CVE-2019-0980, CVE-2019-0981.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_core:1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EDF760A-C775-457E-8091-586E56545B07\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_core:1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F87DCF0-0552-4815-8148-C9894397C5EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_core:2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3BF7E3F6-D3AE-404D-8F0E-0C57BF23006C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_core:2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5AB75F9-B0FC-46B5-A863-0458696773DB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"42A6DF09-B8E1-414D-97E7-453566055279\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D400E856-2B2E-4CEA-8CA5-309FDF371CEA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F422A8C-2C4E-42C8-B420-E0728037E15C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E039CE1F-B988-4741-AE2E-5B36E2AF9688\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21540673-614A-4D40-8BD7-3F07723803B0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AEE2E768-0F45-46E1-B6D7-087917109D98\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83B14968-3985-43C3-ACE5-8307196EFAE3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CB85C75-4D35-480E-843D-60579EC75FCB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B8F3DD2-A145-4AF1-8545-CC42892DA3D1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FB5CDAE-C713-4D9D-9D6A-2C2E8924A4BB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CAACE735-003E-4ACB-A82E-C0CF97D7F013\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B921FDB-8E7D-427E-82BE-4432585080CF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB79EE26-FC32-417D-A49C-A1A63165A968\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8EDC4407-7E92-4E60-82F0-0C87D1860D3A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*\",\"matchCriteriaId\":\"B320A104-9037-487E-BC9A-62B4A6B49FD0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40B3A045-B08A-44E0-91BE-726753F6A362\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6CE5198-C498-4672-AF4C-77AB4BE06C5C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F422A8C-2C4E-42C8-B420-E0728037E15C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"280FE663-23BE-45D2-9B31-5F577E390B48\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F422A8C-2C4E-42C8-B420-E0728037E15C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21540673-614A-4D40-8BD7-3F07723803B0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"734112B3-1383-4BE3-8721-C0F84566B764\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36B0E40A-84EF-4099-A395-75D6B8CDA196\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"280FE663-23BE-45D2-9B31-5F577E390B48\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF0B660D-1F30-4D45-B98B-726EDB8CB90F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"734112B3-1383-4BE3-8721-C0F84566B764\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36B0E40A-84EF-4099-A395-75D6B8CDA196\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6CE5198-C498-4672-AF4C-77AB4BE06C5C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36B0E40A-84EF-4099-A395-75D6B8CDA196\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83B14968-3985-43C3-ACE5-8307196EFAE3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CB85C75-4D35-480E-843D-60579EC75FCB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B8F3DD2-A145-4AF1-8545-CC42892DA3D1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB79EE26-FC32-417D-A49C-A1A63165A968\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"734112B3-1383-4BE3-8721-C0F84566B764\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36B0E40A-84EF-4099-A395-75D6B8CDA196\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AEE2E768-0F45-46E1-B6D7-087917109D98\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D3F18AF-84ED-473B-A8DF-65EB23C475AF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AEE2E768-0F45-46E1-B6D7-087917109D98\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83B14968-3985-43C3-ACE5-8307196EFAE3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CB85C75-4D35-480E-843D-60579EC75FCB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B8F3DD2-A145-4AF1-8545-CC42892DA3D1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FB5CDAE-C713-4D9D-9D6A-2C2E8924A4BB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6CE5198-C498-4672-AF4C-77AB4BE06C5C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CAACE735-003E-4ACB-A82E-C0CF97D7F013\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B921FDB-8E7D-427E-82BE-4432585080CF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB79EE26-FC32-417D-A49C-A1A63165A968\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92BC9265-6959-4D37-BE5E-8C45E98992F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"831F0F47-3565-4763-B16F-C87B1FF2035E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E3F09B5-569F-4C58-9FCA-3C0953D107B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C3741B8-851F-475D-B428-523F4F722350\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6897676D-53F9-45B3-B27F-7FF9A4C58D33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E28F226A-CBC7-4A32-BE58-398FA5B42481\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"76C24D94-834A-4E9D-8F73-624AFA99AAA2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B09ACF2D-D83F-4A86-8185-9569605D8EE1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC10D919-57FD-4725-B8D2-39ECB476902F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1272DF03-7674-4BD4-8E64-94004B195448\"}]}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1259\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1259\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}"
}
}
gsd-2019-0820
Vulnerability from gsd
Modified
2023-12-13 01:23
Details
A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2019-0820",
"description": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.",
"id": "GSD-2019-0820",
"references": [
"https://access.redhat.com/errata/RHSA-2019:1259",
"https://access.redhat.com/errata/RHSA-2019:1236",
"https://linux.oracle.com/cve/CVE-2019-0820.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2019-0820"
],
"details": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.",
"id": "GSD-2019-0820",
"modified": "2023-12-13T01:23:40.109778Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secure@microsoft.com",
"ID": "CVE-2019-0820",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Microsoft .NET Framework 4.5.2",
"version": {
"version_data": [
{
"version_value": "Windows 7 for 32-bit Systems Service Pack 1"
},
{
"version_value": "Windows 7 for x64-based Systems Service Pack 1"
},
{
"version_value": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
},
{
"version_value": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
},
{
"version_value": "Windows Server 2012"
},
{
"version_value": "Windows Server 2012 (Server Core installation)"
},
{
"version_value": "Windows 8.1 for 32-bit systems"
},
{
"version_value": "Windows 8.1 for x64-based systems"
},
{
"version_value": "Windows Server 2012 R2"
},
{
"version_value": "Windows RT 8.1"
},
{
"version_value": "Windows Server 2012 R2 (Server Core installation)"
},
{
"version_value": "Windows Server 2008 for 32-bit Systems Service Pack 2"
},
{
"version_value": "Windows Server 2008 for x64-based Systems Service Pack 2"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.6",
"version": {
"version_data": [
{
"version_value": "Windows Server 2008 for 32-bit Systems Service Pack 2"
},
{
"version_value": "Windows Server 2008 for x64-based Systems Service Pack 2"
}
]
}
},
{
"product_name": ".NET Core",
"version": {
"version_data": [
{
"version_value": "1"
},
{
"version_value": "1.1"
},
{
"version_value": "2.1"
},
{
"version_value": "2.2"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.7.2",
"version": {
"version_data": [
{
"version_value": "Windows 10 Version 1803 for 32-bit Systems"
},
{
"version_value": "Windows 10 Version 1803 for x64-based Systems"
},
{
"version_value": "Windows Server, version 1803 (Server Core Installation)"
},
{
"version_value": "Windows 10 Version 1803 for ARM64-based Systems"
},
{
"version_value": "Windows Server 2019"
},
{
"version_value": "Windows Server 2019 (Server Core installation)"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2",
"version": {
"version_data": [
{
"version_value": "Windows 7 for 32-bit Systems Service Pack 1"
},
{
"version_value": "Windows 7 for x64-based Systems Service Pack 1"
},
{
"version_value": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
},
{
"version_value": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
},
{
"version_value": "Windows Server 2012"
},
{
"version_value": "Windows Server 2012 (Server Core installation)"
},
{
"version_value": "Windows 8.1 for 32-bit systems"
},
{
"version_value": "Windows 8.1 for x64-based systems"
},
{
"version_value": "Windows Server 2012 R2"
},
{
"version_value": "Windows RT 8.1"
},
{
"version_value": "Windows Server 2012 R2 (Server Core installation)"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"version": {
"version_data": [
{
"version_value": "Windows Server 2016"
},
{
"version_value": "Windows Server 2016 (Server Core installation)"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2012",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2012 R2",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows RT 8.1",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2016",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1703 for 32-bit Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1703 for x64-based Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1809 for 32-bit Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1809 for x64-based Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2019",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server 2019 (Server Core installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1903 for 32-bit Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows 10 Version 1903 for x64-based Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8 on Windows Server, version 1903 (Server Core installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5",
"version": {
"version_data": [
{
"version_value": "Windows Server 2012"
},
{
"version_value": "Windows Server 2012 (Server Core installation)"
},
{
"version_value": "Windows 8.1 for 32-bit systems"
},
{
"version_value": "Windows 8.1 for x64-based systems"
},
{
"version_value": "Windows Server 2012 R2"
},
{
"version_value": "Windows Server 2012 R2 (Server Core installation)"
},
{
"version_value": "Windows 10 for 32-bit Systems"
},
{
"version_value": "Windows 10 for x64-based Systems"
},
{
"version_value": "Windows Server 2016"
},
{
"version_value": "Windows 10 Version 1607 for 32-bit Systems"
},
{
"version_value": "Windows 10 Version 1607 for x64-based Systems"
},
{
"version_value": "Windows Server 2016 (Server Core installation)"
},
{
"version_value": "Windows 10 Version 1703 for 32-bit Systems"
},
{
"version_value": "Windows 10 Version 1703 for x64-based Systems"
},
{
"version_value": "Windows 10 Version 1709 for 32-bit Systems"
},
{
"version_value": "Windows 10 Version 1709 for x64-based Systems"
},
{
"version_value": "Windows 10 Version 1803 for 32-bit Systems"
},
{
"version_value": "Windows 10 Version 1803 for x64-based Systems"
},
{
"version_value": "Windows Server, version 1803 (Server Core Installation)"
},
{
"version_value": "Windows 10 Version 1803 for ARM64-based Systems"
},
{
"version_value": "Windows 10 Version 1809 for 32-bit Systems"
},
{
"version_value": "Windows 10 Version 1809 for x64-based Systems"
},
{
"version_value": "Windows Server 2019"
},
{
"version_value": "Windows Server 2019 (Server Core installation)"
},
{
"version_value": "Windows 10 Version 1709 for ARM64-based Systems"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5 on Windows 10 Version 1903 for 32-bit Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5 on Windows 10 Version 1903 for x64-based Systems",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5 on Windows Server, version 1903 (Server Core installation)",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.0",
"version": {
"version_data": [
{
"version_value": "Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2"
},
{
"version_value": "Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"
},
{
"version_value": "Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 2.0",
"version": {
"version_data": [
{
"version_value": "Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2"
},
{
"version_value": "Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"
},
{
"version_value": "Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5.1",
"version": {
"version_data": [
{
"version_value": "Windows 7 for 32-bit Systems Service Pack 1"
},
{
"version_value": "Windows 7 for x64-based Systems Service Pack 1"
},
{
"version_value": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
},
{
"version_value": "Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1"
},
{
"version_value": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
}
]
}
}
]
},
"vendor_name": "Microsoft"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Denial of Service"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"refsource": "MISC",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
},
{
"name": "RHSA-2019:1259",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
]
}
},
"gitlab.com": {
"advisories": [
{
"affected_range": "[4.3.0,4.3.1)",
"affected_versions": "All versions starting from 4.3.0 before 4.3.1",
"cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"cvss_v3": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-400",
"CWE-937"
],
"date": "2021-08-04",
"description": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.",
"fixed_versions": [
"4.3.1"
],
"identifier": "CVE-2019-0820",
"identifiers": [
"GHSA-cmhx-cq75-c4mj",
"CVE-2019-0820"
],
"not_impacted": "All versions before 4.3.0, all versions starting from 4.3.1",
"package_slug": "nuget/System.Text.RegularExpressions",
"pubdate": "2021-08-04",
"solution": "Upgrade to version 4.3.1 or above.",
"title": "Uncontrolled Resource Consumption",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2019-0820",
"https://github.com/advisories/GHSA-cmhx-cq75-c4mj"
],
"uuid": "1e4543c1-4745-4f9b-95a1-0f8f618b8363"
}
]
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_core:1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_core:1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_core:2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_core:2.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secure@microsoft.com",
"ID": "CVE-2019-0820"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"refsource": "MISC",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
},
{
"name": "RHSA-2019:1259",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
},
"lastModifiedDate": "2023-02-02T19:16Z",
"publishedDate": "2019-05-16T19:29Z"
}
}
}
rhsa-2019:1236
Vulnerability from csaf_redhat
Published
2019-05-15 21:55
Modified
2024-11-15 03:10
Summary
Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security and bug fix update
Notes
Topic
Updates for rh-dotnetcore10-dotnetcore, rh-dotnetcore11-dotnetcore, rh-dotnet21-dotnet, rh-dotnet22-dotnet and rh-dotnet22-curl are now available for .NET Core on Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET Core that address security vulnerabilities are now available. The updated versions are .NET Core 1.0.16, 1.1.13, 2.1.11, and 2.2.5.
Security Fix(es):
* dotNET: timeouts for regular expressions are not enforced (CVE-2019-0820)
* dotNET: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0980)
* dotNET: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0981)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Re-enable bash completion in rh-dotnet22-dotnet (BZ#1654863)
* Error rebuilding rh-dotnet22-curl in CentOS (BZ#1678932)
* Broken apphost caused by unset DOTNET_ROOT (BZ#1703479)
* Make bash completion compatible with rh-dotnet22 packages (BZ#1705259)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updates for rh-dotnetcore10-dotnetcore, rh-dotnetcore11-dotnetcore, rh-dotnet21-dotnet, rh-dotnet22-dotnet and rh-dotnet22-curl are now available for .NET Core on Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET Core that address security vulnerabilities are now available. The updated versions are .NET Core 1.0.16, 1.1.13, 2.1.11, and 2.2.5.\n\nSecurity Fix(es):\n\n* dotNET: timeouts for regular expressions are not enforced (CVE-2019-0820)\n\n* dotNET: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0980)\n\n* dotNET: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0981)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Re-enable bash completion in rh-dotnet22-dotnet (BZ#1654863)\n\n* Error rebuilding rh-dotnet22-curl in CentOS (BZ#1678932)\n\n* Broken apphost caused by unset DOTNET_ROOT (BZ#1703479)\n\n* Make bash completion compatible with rh-dotnet22 packages (BZ#1705259)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1236",
"url": "https://access.redhat.com/errata/RHSA-2019:1236"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981"
},
{
"category": "external",
"summary": "1654863",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1654863"
},
{
"category": "external",
"summary": "1678932",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1678932"
},
{
"category": "external",
"summary": "1703479",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1703479"
},
{
"category": "external",
"summary": "1703508",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1703508"
},
{
"category": "external",
"summary": "1704454",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1704454"
},
{
"category": "external",
"summary": "1704934",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1704934"
},
{
"category": "external",
"summary": "1705147",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705147"
},
{
"category": "external",
"summary": "1705259",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705259"
},
{
"category": "external",
"summary": "1705502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705502"
},
{
"category": "external",
"summary": "1705504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705504"
},
{
"category": "external",
"summary": "1705506",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705506"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1236.json"
}
],
"title": "Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security and bug fix update",
"tracking": {
"current_release_date": "2024-11-15T03:10:45+00:00",
"generator": {
"date": "2024-11-15T03:10:45+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1236",
"initial_release_date": "2019-05-15T21:55:11+00:00",
"revision_history": [
{
"date": "2019-05-15T21:55:11+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-15T21:55:11+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T03:10:45+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.0::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.0::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.0::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.2::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.2::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.2::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.1::el7"
}
}
}
],
"category": "product_family",
"name": ".NET Core on Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"product": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"product_id": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore10-dotnetcore@1.0.16-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"product": {
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"product_id": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore10-dotnetcore-debuginfo@1.0.16-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"product": {
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"product_id": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore11-dotnetcore-debuginfo@1.1.13-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"product": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"product_id": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore11-dotnetcore@1.1.13-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-0:2.2-7.el7.x86_64",
"product": {
"name": "rh-dotnet22-0:2.2-7.el7.x86_64",
"product_id": "rh-dotnet22-0:2.2-7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22@2.2-7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"product": {
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"product_id": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-runtime@2.2-7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"product_id": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-libcurl-devel@7.61.1-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"product_id": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-curl@7.61.1-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"product_id": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-libcurl@7.61.1-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"product_id": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-curl-debuginfo@7.61.1-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-debuginfo@2.2.107-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-host-fxr-2.2@2.2.5-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-sdk-2.2@2.2.107-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet@2.2.107-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-host@2.2.5-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-runtime-2.2@2.2.5-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-sdk-2.2.1xx@2.2.107-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-0:2.1-10.el7.x86_64",
"product": {
"name": "rh-dotnet21-0:2.1-10.el7.x86_64",
"product_id": "rh-dotnet21-0:2.1-10.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21@2.1-10.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"product": {
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"product_id": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-runtime@2.1-10.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet@2.1.507-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-runtime-2.1@2.1.11-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-sdk-2.1@2.1.507-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-sdk-2.1.5xx@2.1.507-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-debuginfo@2.1.507-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-host@2.1.11-2.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"product": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"product_id": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore10-dotnetcore@1.0.16-1.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"product": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"product_id": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore11-dotnetcore@1.1.13-1.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-0:2.2-7.el7.src",
"product": {
"name": "rh-dotnet22-0:2.2-7.el7.src",
"product_id": "rh-dotnet22-0:2.2-7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22@2.2-7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"product": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"product_id": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-curl@7.61.1-2.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"product": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"product_id": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet@2.2.107-2.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-0:2.1-10.el7.src",
"product": {
"name": "rh-dotnet21-0:2.1-10.el7.src",
"product_id": "rh-dotnet21-0:2.1-10.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21@2.1-10.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"product": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"product_id": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet@2.1.507-2.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"relates_to_product_reference": "7Server-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"relates_to_product_reference": "7Server-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-0820",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705506"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: timeouts for regular expressions are not enforced",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0820"
},
{
"category": "external",
"summary": "RHBZ#1705506",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705506"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0820"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-15T21:55:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: timeouts for regular expressions are not enforced"
},
{
"cve": "CVE-2019-0980",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705502"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka \u0027.Net Framework and .Net Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0980"
},
{
"category": "external",
"summary": "RHBZ#1705502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705502"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0980",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0980"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0980",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0980"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0980",
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0980"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-15T21:55:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service"
},
{
"cve": "CVE-2019-0981",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705504"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka \u0027.Net Framework and .Net Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0981"
},
{
"category": "external",
"summary": "RHBZ#1705504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705504"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0981",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0981"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0981",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0981"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-15T21:55:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service"
}
]
}
RHSA-2019:1259
Vulnerability from csaf_redhat
Published
2019-05-22 10:22
Modified
2024-11-15 03:09
Summary
Red Hat Security Advisory: dotnet security, bug fix, and enhancement update
Notes
Topic
An update for dotnet is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
A new version of .NET Core that address security vulnerabilities is now available. The updated version is .NET Core Runtime 2.1.11 and SDK 2.1.507.
Security Fix(es):
* dotnet: NuGet Tampering Vulnerability (CVE-2019-0757)
* dotnet: timeouts for regular expressions are not enforced (CVE-2019-0820)
* dotnet: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0980)
* dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0981)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* dotnet: new SocketException((int)SocketError.InvalidArgument).Message is empty (BZ#1712471)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for dotnet is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nA new version of .NET Core that address security vulnerabilities is now available. The updated version is .NET Core Runtime 2.1.11 and SDK 2.1.507.\n\nSecurity Fix(es):\n\n* dotnet: NuGet Tampering Vulnerability (CVE-2019-0757)\n\n* dotnet: timeouts for regular expressions are not enforced (CVE-2019-0820)\n\n* dotnet: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0980)\n\n* dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0981)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* dotnet: new SocketException((int)SocketError.InvalidArgument).Message is empty (BZ#1712471)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1259",
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0757",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0757"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/master/release-notes/2.1/2.1.11/2.1.11.md",
"url": "https://github.com/dotnet/core/blob/master/release-notes/2.1/2.1.11/2.1.11.md"
},
{
"category": "external",
"summary": "1685475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1685475"
},
{
"category": "external",
"summary": "1696836",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1696836"
},
{
"category": "external",
"summary": "1705502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705502"
},
{
"category": "external",
"summary": "1705504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705504"
},
{
"category": "external",
"summary": "1705506",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705506"
},
{
"category": "external",
"summary": "1710068",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1710068"
},
{
"category": "external",
"summary": "1712471",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712471"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1259.json"
}
],
"title": "Red Hat Security Advisory: dotnet security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-11-15T03:09:55+00:00",
"generator": {
"date": "2024-11-15T03:09:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1259",
"initial_release_date": "2019-05-22T10:22:43+00:00",
"revision_history": [
{
"date": "2019-05-22T10:22:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-22T10:22:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T03:09:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-2.1-debuginfo@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-2.1.5xx-debuginfo@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-debugsource@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-2.1@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-fxr-2.1-debuginfo@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-host-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-host-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-2.1@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-debuginfo@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-2.1.5xx@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-fxr-2.1@2.1.11-2.el8_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet-0:2.1.507-2.el8_0.src",
"product": {
"name": "dotnet-0:2.1.507-2.el8_0.src",
"product_id": "dotnet-0:2.1.507-2.el8_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet@2.1.507-2.el8_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-0:2.1.507-2.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src"
},
"product_reference": "dotnet-0:2.1.507-2.el8_0.src",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-host-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-0757",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"discovery_date": "2019-03-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1685475"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in dotnet. A tampering vulnerability exists in NuGet software when executed in a Linux or Mac environment. An attacker who successfully exploits the vulnerability could run arbitrary code in the context of the current user. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: NuGet Tampering Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0757"
},
{
"category": "external",
"summary": "RHBZ#1685475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1685475"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0757",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0757"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0757",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0757"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0757",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0757"
}
],
"release_date": "2019-03-12T17:33:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-22T10:22:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: NuGet Tampering Vulnerability"
},
{
"cve": "CVE-2019-0820",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705506"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: timeouts for regular expressions are not enforced",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0820"
},
{
"category": "external",
"summary": "RHBZ#1705506",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705506"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0820"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-22T10:22:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: timeouts for regular expressions are not enforced"
},
{
"cve": "CVE-2019-0980",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705502"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka \u0027.Net Framework and .Net Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0980"
},
{
"category": "external",
"summary": "RHBZ#1705502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705502"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0980",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0980"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0980",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0980"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0980",
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0980"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-22T10:22:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service"
},
{
"cve": "CVE-2019-0981",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705504"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka \u0027.Net Framework and .Net Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0981"
},
{
"category": "external",
"summary": "RHBZ#1705504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705504"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0981",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0981"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0981",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0981"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-22T10:22:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service"
}
]
}
rhsa-2019:1259
Vulnerability from csaf_redhat
Published
2019-05-22 10:22
Modified
2024-11-15 03:09
Summary
Red Hat Security Advisory: dotnet security, bug fix, and enhancement update
Notes
Topic
An update for dotnet is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
A new version of .NET Core that address security vulnerabilities is now available. The updated version is .NET Core Runtime 2.1.11 and SDK 2.1.507.
Security Fix(es):
* dotnet: NuGet Tampering Vulnerability (CVE-2019-0757)
* dotnet: timeouts for regular expressions are not enforced (CVE-2019-0820)
* dotnet: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0980)
* dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0981)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* dotnet: new SocketException((int)SocketError.InvalidArgument).Message is empty (BZ#1712471)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for dotnet is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nA new version of .NET Core that address security vulnerabilities is now available. The updated version is .NET Core Runtime 2.1.11 and SDK 2.1.507.\n\nSecurity Fix(es):\n\n* dotnet: NuGet Tampering Vulnerability (CVE-2019-0757)\n\n* dotnet: timeouts for regular expressions are not enforced (CVE-2019-0820)\n\n* dotnet: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0980)\n\n* dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0981)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* dotnet: new SocketException((int)SocketError.InvalidArgument).Message is empty (BZ#1712471)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1259",
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0757",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0757"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/master/release-notes/2.1/2.1.11/2.1.11.md",
"url": "https://github.com/dotnet/core/blob/master/release-notes/2.1/2.1.11/2.1.11.md"
},
{
"category": "external",
"summary": "1685475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1685475"
},
{
"category": "external",
"summary": "1696836",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1696836"
},
{
"category": "external",
"summary": "1705502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705502"
},
{
"category": "external",
"summary": "1705504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705504"
},
{
"category": "external",
"summary": "1705506",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705506"
},
{
"category": "external",
"summary": "1710068",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1710068"
},
{
"category": "external",
"summary": "1712471",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712471"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1259.json"
}
],
"title": "Red Hat Security Advisory: dotnet security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-11-15T03:09:55+00:00",
"generator": {
"date": "2024-11-15T03:09:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1259",
"initial_release_date": "2019-05-22T10:22:43+00:00",
"revision_history": [
{
"date": "2019-05-22T10:22:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-22T10:22:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T03:09:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-2.1-debuginfo@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-2.1.5xx-debuginfo@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-debugsource@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-2.1@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-fxr-2.1-debuginfo@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-host-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-host-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-2.1@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-debuginfo@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-2.1.5xx@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-fxr-2.1@2.1.11-2.el8_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet-0:2.1.507-2.el8_0.src",
"product": {
"name": "dotnet-0:2.1.507-2.el8_0.src",
"product_id": "dotnet-0:2.1.507-2.el8_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet@2.1.507-2.el8_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-0:2.1.507-2.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src"
},
"product_reference": "dotnet-0:2.1.507-2.el8_0.src",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-host-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-0757",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"discovery_date": "2019-03-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1685475"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in dotnet. A tampering vulnerability exists in NuGet software when executed in a Linux or Mac environment. An attacker who successfully exploits the vulnerability could run arbitrary code in the context of the current user. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: NuGet Tampering Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0757"
},
{
"category": "external",
"summary": "RHBZ#1685475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1685475"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0757",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0757"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0757",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0757"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0757",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0757"
}
],
"release_date": "2019-03-12T17:33:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-22T10:22:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: NuGet Tampering Vulnerability"
},
{
"cve": "CVE-2019-0820",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705506"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: timeouts for regular expressions are not enforced",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0820"
},
{
"category": "external",
"summary": "RHBZ#1705506",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705506"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0820"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-22T10:22:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: timeouts for regular expressions are not enforced"
},
{
"cve": "CVE-2019-0980",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705502"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka \u0027.Net Framework and .Net Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0980"
},
{
"category": "external",
"summary": "RHBZ#1705502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705502"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0980",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0980"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0980",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0980"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0980",
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0980"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-22T10:22:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service"
},
{
"cve": "CVE-2019-0981",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705504"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka \u0027.Net Framework and .Net Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0981"
},
{
"category": "external",
"summary": "RHBZ#1705504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705504"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0981",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0981"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0981",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0981"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-22T10:22:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service"
}
]
}
rhsa-2019_1259
Vulnerability from csaf_redhat
Published
2019-05-22 10:22
Modified
2024-11-15 03:09
Summary
Red Hat Security Advisory: dotnet security, bug fix, and enhancement update
Notes
Topic
An update for dotnet is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
A new version of .NET Core that address security vulnerabilities is now available. The updated version is .NET Core Runtime 2.1.11 and SDK 2.1.507.
Security Fix(es):
* dotnet: NuGet Tampering Vulnerability (CVE-2019-0757)
* dotnet: timeouts for regular expressions are not enforced (CVE-2019-0820)
* dotnet: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0980)
* dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0981)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* dotnet: new SocketException((int)SocketError.InvalidArgument).Message is empty (BZ#1712471)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for dotnet is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nA new version of .NET Core that address security vulnerabilities is now available. The updated version is .NET Core Runtime 2.1.11 and SDK 2.1.507.\n\nSecurity Fix(es):\n\n* dotnet: NuGet Tampering Vulnerability (CVE-2019-0757)\n\n* dotnet: timeouts for regular expressions are not enforced (CVE-2019-0820)\n\n* dotnet: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0980)\n\n* dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0981)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* dotnet: new SocketException((int)SocketError.InvalidArgument).Message is empty (BZ#1712471)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1259",
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0757",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0757"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/master/release-notes/2.1/2.1.11/2.1.11.md",
"url": "https://github.com/dotnet/core/blob/master/release-notes/2.1/2.1.11/2.1.11.md"
},
{
"category": "external",
"summary": "1685475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1685475"
},
{
"category": "external",
"summary": "1696836",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1696836"
},
{
"category": "external",
"summary": "1705502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705502"
},
{
"category": "external",
"summary": "1705504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705504"
},
{
"category": "external",
"summary": "1705506",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705506"
},
{
"category": "external",
"summary": "1710068",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1710068"
},
{
"category": "external",
"summary": "1712471",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712471"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1259.json"
}
],
"title": "Red Hat Security Advisory: dotnet security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-11-15T03:09:55+00:00",
"generator": {
"date": "2024-11-15T03:09:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1259",
"initial_release_date": "2019-05-22T10:22:43+00:00",
"revision_history": [
{
"date": "2019-05-22T10:22:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-22T10:22:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T03:09:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-2.1-debuginfo@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-2.1.5xx-debuginfo@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-debugsource@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-2.1@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-fxr-2.1-debuginfo@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-host-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-host-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-2.1@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-debuginfo@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@2.1.11-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-2.1.5xx@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-0:2.1.507-2.el8_0.x86_64",
"product": {
"name": "dotnet-0:2.1.507-2.el8_0.x86_64",
"product_id": "dotnet-0:2.1.507-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet@2.1.507-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"product": {
"name": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"product_id": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-fxr-2.1@2.1.11-2.el8_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet-0:2.1.507-2.el8_0.src",
"product": {
"name": "dotnet-0:2.1.507-2.el8_0.src",
"product_id": "dotnet-0:2.1.507-2.el8_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet@2.1.507-2.el8_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-0:2.1.507-2.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src"
},
"product_reference": "dotnet-0:2.1.507-2.el8_0.src",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-host-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64"
},
"product_reference": "dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
},
"product_reference": "dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-0757",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"discovery_date": "2019-03-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1685475"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in dotnet. A tampering vulnerability exists in NuGet software when executed in a Linux or Mac environment. An attacker who successfully exploits the vulnerability could run arbitrary code in the context of the current user. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: NuGet Tampering Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0757"
},
{
"category": "external",
"summary": "RHBZ#1685475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1685475"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0757",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0757"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0757",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0757"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0757",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0757"
}
],
"release_date": "2019-03-12T17:33:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-22T10:22:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: NuGet Tampering Vulnerability"
},
{
"cve": "CVE-2019-0820",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705506"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: timeouts for regular expressions are not enforced",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0820"
},
{
"category": "external",
"summary": "RHBZ#1705506",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705506"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0820"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-22T10:22:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: timeouts for regular expressions are not enforced"
},
{
"cve": "CVE-2019-0980",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705502"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka \u0027.Net Framework and .Net Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0980"
},
{
"category": "external",
"summary": "RHBZ#1705502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705502"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0980",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0980"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0980",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0980"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0980",
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0980"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-22T10:22:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service"
},
{
"cve": "CVE-2019-0981",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705504"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka \u0027.Net Framework and .Net Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0981"
},
{
"category": "external",
"summary": "RHBZ#1705504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705504"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0981",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0981"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0981",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0981"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-22T10:22:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.src",
"AppStream-8.0.0.Z:dotnet-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debuginfo-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-debugsource-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-host-fxr-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-runtime-2.1-debuginfo-0:2.1.11-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-0:2.1.507-2.el8_0.x86_64",
"AppStream-8.0.0.Z:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.507-2.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service"
}
]
}
rhsa-2019_1236
Vulnerability from csaf_redhat
Published
2019-05-15 21:55
Modified
2024-11-15 03:10
Summary
Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security and bug fix update
Notes
Topic
Updates for rh-dotnetcore10-dotnetcore, rh-dotnetcore11-dotnetcore, rh-dotnet21-dotnet, rh-dotnet22-dotnet and rh-dotnet22-curl are now available for .NET Core on Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET Core that address security vulnerabilities are now available. The updated versions are .NET Core 1.0.16, 1.1.13, 2.1.11, and 2.2.5.
Security Fix(es):
* dotNET: timeouts for regular expressions are not enforced (CVE-2019-0820)
* dotNET: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0980)
* dotNET: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0981)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Re-enable bash completion in rh-dotnet22-dotnet (BZ#1654863)
* Error rebuilding rh-dotnet22-curl in CentOS (BZ#1678932)
* Broken apphost caused by unset DOTNET_ROOT (BZ#1703479)
* Make bash completion compatible with rh-dotnet22 packages (BZ#1705259)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updates for rh-dotnetcore10-dotnetcore, rh-dotnetcore11-dotnetcore, rh-dotnet21-dotnet, rh-dotnet22-dotnet and rh-dotnet22-curl are now available for .NET Core on Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET Core that address security vulnerabilities are now available. The updated versions are .NET Core 1.0.16, 1.1.13, 2.1.11, and 2.2.5.\n\nSecurity Fix(es):\n\n* dotNET: timeouts for regular expressions are not enforced (CVE-2019-0820)\n\n* dotNET: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0980)\n\n* dotNET: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0981)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Re-enable bash completion in rh-dotnet22-dotnet (BZ#1654863)\n\n* Error rebuilding rh-dotnet22-curl in CentOS (BZ#1678932)\n\n* Broken apphost caused by unset DOTNET_ROOT (BZ#1703479)\n\n* Make bash completion compatible with rh-dotnet22 packages (BZ#1705259)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1236",
"url": "https://access.redhat.com/errata/RHSA-2019:1236"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981"
},
{
"category": "external",
"summary": "1654863",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1654863"
},
{
"category": "external",
"summary": "1678932",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1678932"
},
{
"category": "external",
"summary": "1703479",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1703479"
},
{
"category": "external",
"summary": "1703508",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1703508"
},
{
"category": "external",
"summary": "1704454",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1704454"
},
{
"category": "external",
"summary": "1704934",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1704934"
},
{
"category": "external",
"summary": "1705147",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705147"
},
{
"category": "external",
"summary": "1705259",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705259"
},
{
"category": "external",
"summary": "1705502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705502"
},
{
"category": "external",
"summary": "1705504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705504"
},
{
"category": "external",
"summary": "1705506",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705506"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1236.json"
}
],
"title": "Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security and bug fix update",
"tracking": {
"current_release_date": "2024-11-15T03:10:45+00:00",
"generator": {
"date": "2024-11-15T03:10:45+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1236",
"initial_release_date": "2019-05-15T21:55:11+00:00",
"revision_history": [
{
"date": "2019-05-15T21:55:11+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-15T21:55:11+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T03:10:45+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.0::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.0::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.0::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.2::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.2::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.2::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.1::el7"
}
}
}
],
"category": "product_family",
"name": ".NET Core on Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"product": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"product_id": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore10-dotnetcore@1.0.16-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"product": {
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"product_id": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore10-dotnetcore-debuginfo@1.0.16-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"product": {
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"product_id": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore11-dotnetcore-debuginfo@1.1.13-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"product": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"product_id": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore11-dotnetcore@1.1.13-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-0:2.2-7.el7.x86_64",
"product": {
"name": "rh-dotnet22-0:2.2-7.el7.x86_64",
"product_id": "rh-dotnet22-0:2.2-7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22@2.2-7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"product": {
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"product_id": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-runtime@2.2-7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"product_id": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-libcurl-devel@7.61.1-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"product_id": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-curl@7.61.1-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"product_id": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-libcurl@7.61.1-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"product_id": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-curl-debuginfo@7.61.1-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-debuginfo@2.2.107-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-host-fxr-2.2@2.2.5-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-sdk-2.2@2.2.107-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet@2.2.107-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-host@2.2.5-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-runtime-2.2@2.2.5-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-sdk-2.2.1xx@2.2.107-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-0:2.1-10.el7.x86_64",
"product": {
"name": "rh-dotnet21-0:2.1-10.el7.x86_64",
"product_id": "rh-dotnet21-0:2.1-10.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21@2.1-10.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"product": {
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"product_id": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-runtime@2.1-10.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet@2.1.507-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-runtime-2.1@2.1.11-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-sdk-2.1@2.1.507-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-sdk-2.1.5xx@2.1.507-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-debuginfo@2.1.507-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-host@2.1.11-2.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"product": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"product_id": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore10-dotnetcore@1.0.16-1.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"product": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"product_id": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore11-dotnetcore@1.1.13-1.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-0:2.2-7.el7.src",
"product": {
"name": "rh-dotnet22-0:2.2-7.el7.src",
"product_id": "rh-dotnet22-0:2.2-7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22@2.2-7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"product": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"product_id": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-curl@7.61.1-2.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"product": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"product_id": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet@2.2.107-2.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-0:2.1-10.el7.src",
"product": {
"name": "rh-dotnet21-0:2.1-10.el7.src",
"product_id": "rh-dotnet21-0:2.1-10.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21@2.1-10.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"product": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"product_id": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet@2.1.507-2.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"relates_to_product_reference": "7Server-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"relates_to_product_reference": "7Server-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-0820",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705506"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: timeouts for regular expressions are not enforced",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0820"
},
{
"category": "external",
"summary": "RHBZ#1705506",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705506"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0820"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-15T21:55:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: timeouts for regular expressions are not enforced"
},
{
"cve": "CVE-2019-0980",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705502"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka \u0027.Net Framework and .Net Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0980"
},
{
"category": "external",
"summary": "RHBZ#1705502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705502"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0980",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0980"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0980",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0980"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0980",
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0980"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-15T21:55:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service"
},
{
"cve": "CVE-2019-0981",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705504"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka \u0027.Net Framework and .Net Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0981"
},
{
"category": "external",
"summary": "RHBZ#1705504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705504"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0981",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0981"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0981",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0981"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-15T21:55:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service"
}
]
}
RHSA-2019:1236
Vulnerability from csaf_redhat
Published
2019-05-15 21:55
Modified
2024-11-15 03:10
Summary
Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security and bug fix update
Notes
Topic
Updates for rh-dotnetcore10-dotnetcore, rh-dotnetcore11-dotnetcore, rh-dotnet21-dotnet, rh-dotnet22-dotnet and rh-dotnet22-curl are now available for .NET Core on Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET Core that address security vulnerabilities are now available. The updated versions are .NET Core 1.0.16, 1.1.13, 2.1.11, and 2.2.5.
Security Fix(es):
* dotNET: timeouts for regular expressions are not enforced (CVE-2019-0820)
* dotNET: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0980)
* dotNET: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0981)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Re-enable bash completion in rh-dotnet22-dotnet (BZ#1654863)
* Error rebuilding rh-dotnet22-curl in CentOS (BZ#1678932)
* Broken apphost caused by unset DOTNET_ROOT (BZ#1703479)
* Make bash completion compatible with rh-dotnet22 packages (BZ#1705259)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updates for rh-dotnetcore10-dotnetcore, rh-dotnetcore11-dotnetcore, rh-dotnet21-dotnet, rh-dotnet22-dotnet and rh-dotnet22-curl are now available for .NET Core on Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET Core that address security vulnerabilities are now available. The updated versions are .NET Core 1.0.16, 1.1.13, 2.1.11, and 2.2.5.\n\nSecurity Fix(es):\n\n* dotNET: timeouts for regular expressions are not enforced (CVE-2019-0820)\n\n* dotNET: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0980)\n\n* dotNET: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0981)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Re-enable bash completion in rh-dotnet22-dotnet (BZ#1654863)\n\n* Error rebuilding rh-dotnet22-curl in CentOS (BZ#1678932)\n\n* Broken apphost caused by unset DOTNET_ROOT (BZ#1703479)\n\n* Make bash completion compatible with rh-dotnet22 packages (BZ#1705259)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1236",
"url": "https://access.redhat.com/errata/RHSA-2019:1236"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981"
},
{
"category": "external",
"summary": "1654863",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1654863"
},
{
"category": "external",
"summary": "1678932",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1678932"
},
{
"category": "external",
"summary": "1703479",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1703479"
},
{
"category": "external",
"summary": "1703508",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1703508"
},
{
"category": "external",
"summary": "1704454",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1704454"
},
{
"category": "external",
"summary": "1704934",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1704934"
},
{
"category": "external",
"summary": "1705147",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705147"
},
{
"category": "external",
"summary": "1705259",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705259"
},
{
"category": "external",
"summary": "1705502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705502"
},
{
"category": "external",
"summary": "1705504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705504"
},
{
"category": "external",
"summary": "1705506",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705506"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1236.json"
}
],
"title": "Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security and bug fix update",
"tracking": {
"current_release_date": "2024-11-15T03:10:45+00:00",
"generator": {
"date": "2024-11-15T03:10:45+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1236",
"initial_release_date": "2019-05-15T21:55:11+00:00",
"revision_history": [
{
"date": "2019-05-15T21:55:11+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-15T21:55:11+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T03:10:45+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.0::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.0::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.0::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:1.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.2::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.2::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.2::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.1::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:2.1::el7"
}
}
}
],
"category": "product_family",
"name": ".NET Core on Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"product": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"product_id": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore10-dotnetcore@1.0.16-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"product": {
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"product_id": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore10-dotnetcore-debuginfo@1.0.16-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"product": {
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"product_id": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore11-dotnetcore-debuginfo@1.1.13-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"product": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"product_id": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore11-dotnetcore@1.1.13-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-0:2.2-7.el7.x86_64",
"product": {
"name": "rh-dotnet22-0:2.2-7.el7.x86_64",
"product_id": "rh-dotnet22-0:2.2-7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22@2.2-7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"product": {
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"product_id": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-runtime@2.2-7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"product_id": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-libcurl-devel@7.61.1-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"product_id": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-curl@7.61.1-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"product_id": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-libcurl@7.61.1-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"product_id": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-curl-debuginfo@7.61.1-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-debuginfo@2.2.107-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-host-fxr-2.2@2.2.5-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-sdk-2.2@2.2.107-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet@2.2.107-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-host@2.2.5-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-runtime-2.2@2.2.5-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"product": {
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"product_id": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet-sdk-2.2.1xx@2.2.107-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-0:2.1-10.el7.x86_64",
"product": {
"name": "rh-dotnet21-0:2.1-10.el7.x86_64",
"product_id": "rh-dotnet21-0:2.1-10.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21@2.1-10.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"product": {
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"product_id": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-runtime@2.1-10.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet@2.1.507-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-runtime-2.1@2.1.11-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-sdk-2.1@2.1.507-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-sdk-2.1.5xx@2.1.507-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-debuginfo@2.1.507-2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"product": {
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"product_id": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet-host@2.1.11-2.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"product": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"product_id": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore10-dotnetcore@1.0.16-1.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"product": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"product_id": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnetcore11-dotnetcore@1.1.13-1.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-0:2.2-7.el7.src",
"product": {
"name": "rh-dotnet22-0:2.2-7.el7.src",
"product_id": "rh-dotnet22-0:2.2-7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22@2.2-7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"product": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"product_id": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-curl@7.61.1-2.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"product": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"product_id": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet22-dotnet@2.2.107-2.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-0:2.1-10.el7.src",
"product": {
"name": "rh-dotnet21-0:2.1-10.el7.src",
"product_id": "rh-dotnet21-0:2.1-10.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21@2.1-10.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"product": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"product_id": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet21-dotnet@2.1.507-2.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"relates_to_product_reference": "7Server-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"relates_to_product_reference": "7Server-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7Server-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64"
},
"product_reference": "rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64"
},
"product_reference": "rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64"
},
"product_reference": "rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64"
},
"product_reference": "rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
},
"product_reference": "rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-2.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-0820",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705506"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: timeouts for regular expressions are not enforced",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0820"
},
{
"category": "external",
"summary": "RHBZ#1705506",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705506"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0820"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-15T21:55:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: timeouts for regular expressions are not enforced"
},
{
"cve": "CVE-2019-0980",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705502"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka \u0027.Net Framework and .Net Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0980"
},
{
"category": "external",
"summary": "RHBZ#1705502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705502"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0980",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0980"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0980",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0980"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0980",
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0980"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-15T21:55:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service"
},
{
"cve": "CVE-2019-0981",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1705504"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka \u0027.Net Framework and .Net Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-0981"
},
{
"category": "external",
"summary": "RHBZ#1705504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705504"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-0981",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0981"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0981",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0981"
},
{
"category": "external",
"summary": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981"
}
],
"release_date": "2019-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-15T21:55:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7ComputeNode-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Server-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.src",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.0:rh-dotnetcore10-dotnetcore-debuginfo-0:1.0.16-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.src",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-1.1:rh-dotnetcore11-dotnetcore-debuginfo-0:1.1.13-1.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.src",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.11-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.507-2.el7.x86_64",
"7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-10.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-0:2.2-7.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-curl-debuginfo-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.src",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-debuginfo-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-host-fxr-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-runtime-2.2-0:2.2.5-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-dotnet-sdk-2.2.1xx-0:2.2.107-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-libcurl-devel-0:7.61.1-2.el7.x86_64",
"7Workstation-dotNET-2.2:rh-dotnet22-runtime-0:2.2-7.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service"
}
]
}
ghsa-cmhx-cq75-c4mj
Vulnerability from github
Published
2021-08-04 21:03
Modified
2023-02-21 18:57
Severity ?
Summary
Regular Expression Denial of Service in System.Text.RegularExpressions
Details
A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.
{
"affected": [
{
"package": {
"ecosystem": "NuGet",
"name": "System.Text.RegularExpressions"
},
"ranges": [
{
"events": [
{
"introduced": "4.3.0"
},
{
"fixed": "4.3.1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2019-0820"
],
"database_specific": {
"cwe_ids": [
"CWE-1333",
"CWE-400"
],
"github_reviewed": true,
"github_reviewed_at": "2021-08-04T21:03:27Z",
"nvd_published_at": "2019-05-16T19:29:00Z",
"severity": "HIGH"
},
"details": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.",
"id": "GHSA-cmhx-cq75-c4mj",
"modified": "2023-02-21T18:57:08Z",
"published": "2021-08-04T21:03:46Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0820"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
},
{
"type": "WEB",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
],
"summary": "Regular Expression Denial of Service in System.Text.RegularExpressions"
}
var-201905-0991
Vulnerability from variot
A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981. This vulnerability CVE-2019-0980 and CVE-2019-0981 Is a different vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. An attacker can exploit this issue to cause a denial of service condition.
Bug Fix(es):
-
dotnet: new SocketException((int)SocketError.InvalidArgument).Message is empty (BZ#1712471)
-
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
====================================================================
Red Hat Security Advisory
Synopsis: Moderate: .NET Core on Red Hat Enterprise Linux security and bug fix update Advisory ID: RHSA-2019:1236-01 Product: .NET Core on Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:1236 Issue date: 2019-05-15 CVE Names: CVE-2019-0820 CVE-2019-0980 CVE-2019-0981 ==================================================================== 1. Summary:
Updates for rh-dotnetcore10-dotnetcore, rh-dotnetcore11-dotnetcore, rh-dotnet21-dotnet, rh-dotnet22-dotnet and rh-dotnet22-curl are now available for .NET Core on Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- Relevant releases/architectures:
.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 .NET Core on Red Hat Enterprise Linux Server (v. 7) - x86_64 .NET Core on Red Hat Enterprise Linux Workstation (v. 7) - x86_64
- It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET Core that address security vulnerabilities are now available. The updated versions are .NET Core 1.0.16, 1.1.13, 2.1.11, and 2.2.5.
Security Fix(es):
-
dotNET: timeouts for regular expressions are not enforced (CVE-2019-0820)
-
dotNET: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0980)
-
dotNET: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service (CVE-2019-0981)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
-
Re-enable bash completion in rh-dotnet22-dotnet (BZ#1654863)
-
Error rebuilding rh-dotnet22-curl in CentOS (BZ#1678932)
-
Broken apphost caused by unset DOTNET_ROOT (BZ#1703479)
-
Make bash completion compatible with rh-dotnet22 packages (BZ#1705259)
-
Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
- Bugs fixed (https://bugzilla.redhat.com/):
1654863 - Re-enable bash completion in rh-dotnet22-dotnet 1678932 - Error rebuilding rh-dotnet22-curl in CentOS 1703479 - Broken apphost caused by unset DOTNET_ROOT 1703508 - Update to .NET Core 1.1.13 1704454 - Update to .NET Core 1.0.16 1704934 - Update to .NET Core Runtime 2.2.5 and SDK 2.2.107 1705147 - Update to .NET Core Runtime 2.1.11 and SDK 2.1.507 1705259 - Make bash completion compatible with rh-dotnet22 packages 1705502 - CVE-2019-0980 dotNET: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service 1705504 - CVE-2019-0981 dotNET: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service 1705506 - CVE-2019-0820 dotNET: timeouts for regular expressions are not enforced
- Package List:
.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7):
Source: rh-dotnetcore10-dotnetcore-1.0.16-1.el7.src.rpm
x86_64: rh-dotnetcore10-dotnetcore-1.0.16-1.el7.x86_64.rpm rh-dotnetcore10-dotnetcore-debuginfo-1.0.16-1.el7.x86_64.rpm
.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7):
Source: rh-dotnetcore11-dotnetcore-1.1.13-1.el7.src.rpm
x86_64: rh-dotnetcore11-dotnetcore-1.1.13-1.el7.x86_64.rpm rh-dotnetcore11-dotnetcore-debuginfo-1.1.13-1.el7.x86_64.rpm
.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7):
Source: rh-dotnet21-2.1-10.el7.src.rpm rh-dotnet21-dotnet-2.1.507-2.el7.src.rpm
x86_64: rh-dotnet21-2.1-10.el7.x86_64.rpm rh-dotnet21-dotnet-2.1.507-2.el7.x86_64.rpm rh-dotnet21-dotnet-debuginfo-2.1.507-2.el7.x86_64.rpm rh-dotnet21-dotnet-host-2.1.11-2.el7.x86_64.rpm rh-dotnet21-dotnet-runtime-2.1-2.1.11-2.el7.x86_64.rpm rh-dotnet21-dotnet-sdk-2.1-2.1.507-2.el7.x86_64.rpm rh-dotnet21-dotnet-sdk-2.1.5xx-2.1.507-2.el7.x86_64.rpm rh-dotnet21-runtime-2.1-10.el7.x86_64.rpm
.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7):
Source: rh-dotnet22-2.2-7.el7.src.rpm rh-dotnet22-curl-7.61.1-2.el7.src.rpm rh-dotnet22-dotnet-2.2.107-2.el7.src.rpm
x86_64: rh-dotnet22-2.2-7.el7.x86_64.rpm rh-dotnet22-curl-7.61.1-2.el7.x86_64.rpm rh-dotnet22-curl-debuginfo-7.61.1-2.el7.x86_64.rpm rh-dotnet22-dotnet-2.2.107-2.el7.x86_64.rpm rh-dotnet22-dotnet-debuginfo-2.2.107-2.el7.x86_64.rpm rh-dotnet22-dotnet-host-2.2.5-2.el7.x86_64.rpm rh-dotnet22-dotnet-host-fxr-2.2-2.2.5-2.el7.x86_64.rpm rh-dotnet22-dotnet-runtime-2.2-2.2.5-2.el7.x86_64.rpm rh-dotnet22-dotnet-sdk-2.2-2.2.107-2.el7.x86_64.rpm rh-dotnet22-dotnet-sdk-2.2.1xx-2.2.107-2.el7.x86_64.rpm rh-dotnet22-libcurl-7.61.1-2.el7.x86_64.rpm rh-dotnet22-libcurl-devel-7.61.1-2.el7.x86_64.rpm rh-dotnet22-runtime-2.2-7.el7.x86_64.rpm
.NET Core on Red Hat Enterprise Linux Server (v. 7):
Source: rh-dotnetcore10-dotnetcore-1.0.16-1.el7.src.rpm
x86_64: rh-dotnetcore10-dotnetcore-1.0.16-1.el7.x86_64.rpm rh-dotnetcore10-dotnetcore-debuginfo-1.0.16-1.el7.x86_64.rpm
.NET Core on Red Hat Enterprise Linux Server (v. 7):
Source: rh-dotnetcore11-dotnetcore-1.1.13-1.el7.src.rpm
x86_64: rh-dotnetcore11-dotnetcore-1.1.13-1.el7.x86_64.rpm rh-dotnetcore11-dotnetcore-debuginfo-1.1.13-1.el7.x86_64.rpm
.NET Core on Red Hat Enterprise Linux Server (v. 7):
Source: rh-dotnet21-2.1-10.el7.src.rpm rh-dotnet21-dotnet-2.1.507-2.el7.src.rpm
x86_64: rh-dotnet21-2.1-10.el7.x86_64.rpm rh-dotnet21-dotnet-2.1.507-2.el7.x86_64.rpm rh-dotnet21-dotnet-debuginfo-2.1.507-2.el7.x86_64.rpm rh-dotnet21-dotnet-host-2.1.11-2.el7.x86_64.rpm rh-dotnet21-dotnet-runtime-2.1-2.1.11-2.el7.x86_64.rpm rh-dotnet21-dotnet-sdk-2.1-2.1.507-2.el7.x86_64.rpm rh-dotnet21-dotnet-sdk-2.1.5xx-2.1.507-2.el7.x86_64.rpm rh-dotnet21-runtime-2.1-10.el7.x86_64.rpm
.NET Core on Red Hat Enterprise Linux Server (v. 7):
Source: rh-dotnet22-2.2-7.el7.src.rpm rh-dotnet22-curl-7.61.1-2.el7.src.rpm rh-dotnet22-dotnet-2.2.107-2.el7.src.rpm
x86_64: rh-dotnet22-2.2-7.el7.x86_64.rpm rh-dotnet22-curl-7.61.1-2.el7.x86_64.rpm rh-dotnet22-curl-debuginfo-7.61.1-2.el7.x86_64.rpm rh-dotnet22-dotnet-2.2.107-2.el7.x86_64.rpm rh-dotnet22-dotnet-debuginfo-2.2.107-2.el7.x86_64.rpm rh-dotnet22-dotnet-host-2.2.5-2.el7.x86_64.rpm rh-dotnet22-dotnet-host-fxr-2.2-2.2.5-2.el7.x86_64.rpm rh-dotnet22-dotnet-runtime-2.2-2.2.5-2.el7.x86_64.rpm rh-dotnet22-dotnet-sdk-2.2-2.2.107-2.el7.x86_64.rpm rh-dotnet22-dotnet-sdk-2.2.1xx-2.2.107-2.el7.x86_64.rpm rh-dotnet22-libcurl-7.61.1-2.el7.x86_64.rpm rh-dotnet22-libcurl-devel-7.61.1-2.el7.x86_64.rpm rh-dotnet22-runtime-2.2-7.el7.x86_64.rpm
.NET Core on Red Hat Enterprise Linux Workstation (v. 7):
Source: rh-dotnetcore10-dotnetcore-1.0.16-1.el7.src.rpm
x86_64: rh-dotnetcore10-dotnetcore-1.0.16-1.el7.x86_64.rpm rh-dotnetcore10-dotnetcore-debuginfo-1.0.16-1.el7.x86_64.rpm
.NET Core on Red Hat Enterprise Linux Workstation (v. 7):
Source: rh-dotnetcore11-dotnetcore-1.1.13-1.el7.src.rpm
x86_64: rh-dotnetcore11-dotnetcore-1.1.13-1.el7.x86_64.rpm rh-dotnetcore11-dotnetcore-debuginfo-1.1.13-1.el7.x86_64.rpm
.NET Core on Red Hat Enterprise Linux Workstation (v. 7):
Source: rh-dotnet21-2.1-10.el7.src.rpm rh-dotnet21-dotnet-2.1.507-2.el7.src.rpm
x86_64: rh-dotnet21-2.1-10.el7.x86_64.rpm rh-dotnet21-dotnet-2.1.507-2.el7.x86_64.rpm rh-dotnet21-dotnet-debuginfo-2.1.507-2.el7.x86_64.rpm rh-dotnet21-dotnet-host-2.1.11-2.el7.x86_64.rpm rh-dotnet21-dotnet-runtime-2.1-2.1.11-2.el7.x86_64.rpm rh-dotnet21-dotnet-sdk-2.1-2.1.507-2.el7.x86_64.rpm rh-dotnet21-dotnet-sdk-2.1.5xx-2.1.507-2.el7.x86_64.rpm rh-dotnet21-runtime-2.1-10.el7.x86_64.rpm
.NET Core on Red Hat Enterprise Linux Workstation (v. 7):
Source: rh-dotnet22-2.2-7.el7.src.rpm rh-dotnet22-curl-7.61.1-2.el7.src.rpm rh-dotnet22-dotnet-2.2.107-2.el7.src.rpm
x86_64: rh-dotnet22-2.2-7.el7.x86_64.rpm rh-dotnet22-curl-7.61.1-2.el7.x86_64.rpm rh-dotnet22-curl-debuginfo-7.61.1-2.el7.x86_64.rpm rh-dotnet22-dotnet-2.2.107-2.el7.x86_64.rpm rh-dotnet22-dotnet-debuginfo-2.2.107-2.el7.x86_64.rpm rh-dotnet22-dotnet-host-2.2.5-2.el7.x86_64.rpm rh-dotnet22-dotnet-host-fxr-2.2-2.2.5-2.el7.x86_64.rpm rh-dotnet22-dotnet-runtime-2.2-2.2.5-2.el7.x86_64.rpm rh-dotnet22-dotnet-sdk-2.2-2.2.107-2.el7.x86_64.rpm rh-dotnet22-dotnet-sdk-2.2.1xx-2.2.107-2.el7.x86_64.rpm rh-dotnet22-libcurl-7.61.1-2.el7.x86_64.rpm rh-dotnet22-libcurl-devel-7.61.1-2.el7.x86_64.rpm rh-dotnet22-runtime-2.2-7.el7.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2019-0820 https://access.redhat.com/security/cve/CVE-2019-0980 https://access.redhat.com/security/cve/CVE-2019-0981 https://access.redhat.com/security/updates/classification/#moderate https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIVAwUBXNyKvtzjgjWX9erEAQiFIQ//RuDdkjwFrjsW69TloyogPym1x5uZp2eB hMR1l6l3YTE5ZIeCz7nn86P7IYtLAOiYj5ynjNbGT7aHrM7/R4REedYYqCFxWuu3 3N6vgg/ap1fB+0XdNX+PFNWm/orYRiVr6jyZs2hX4LSDLsQwHuOqVoDcApAHnggH kCRpaxlTEaG9/wyIY3Zvd7ZasxfVUfzhlpzpw25kq6OFJyIokWnVE8G+vs5KS3GQ pTir+3hMc3as8RQVCnWNZoeUhSUemZHvq5MyQqwLCeMFf6CvUTe04oDrMp7FUJHa UcImbcSzzrx3kBvFFmIv6D1uCetuRTrMaXBuOlZcpCJUcnHncvb1OvFhqAeGO6uN NqNnDyRUbyX2cHKpyYTUIfZsCsgKIOBHZNU911URlqnvHAu0LlgAOM0r1uXU48Wg z+LtgnFTDbRmFEspKpN98z4whSL8BnMR8VS/FmPfXo2ApFvipofCK+kPStU0lXZB n7xn4PJyKfst8xUkRfwJ09/GpN328i7QtH53aQG0HCQzKRhxswnc86aQnPW95RWP DPd4EAB74Bq1pEYqRN/gai6bhFsoCS0agf+M7lqBN8ZnQOScj5HD5hy8fsPvB1xD /I5I1sIOJ+Ar0FaCfZqFoXKncap0cp/bBJlHvfCpze4yISy7h6t2E/4l59Zs1xhm KCZo5tPFVoU=dJ6F -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201905-0991",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": ".net framework",
"scope": "eq",
"trust": 2.1,
"vendor": "microsoft",
"version": "4.7.2"
},
{
"model": ".net framework",
"scope": "eq",
"trust": 2.1,
"vendor": "microsoft",
"version": "4.7.1"
},
{
"model": ".net framework",
"scope": "eq",
"trust": 2.1,
"vendor": "microsoft",
"version": "4.6.2"
},
{
"model": ".net framework",
"scope": "eq",
"trust": 2.1,
"vendor": "microsoft",
"version": "4.6.1"
},
{
"model": ".net framework",
"scope": "eq",
"trust": 2.1,
"vendor": "microsoft",
"version": "3.5.1"
},
{
"model": ".net framework",
"scope": "eq",
"trust": 2.1,
"vendor": "microsoft",
"version": "4.8"
},
{
"model": ".net framework",
"scope": "eq",
"trust": 2.1,
"vendor": "microsoft",
"version": "4.7"
},
{
"model": ".net framework",
"scope": "eq",
"trust": 2.1,
"vendor": "microsoft",
"version": "4.6"
},
{
"model": ".net framework",
"scope": "eq",
"trust": 2.1,
"vendor": "microsoft",
"version": "4.5.2"
},
{
"model": ".net framework",
"scope": "eq",
"trust": 2.1,
"vendor": "microsoft",
"version": "3.5"
},
{
"model": ".net core",
"scope": "eq",
"trust": 2.1,
"vendor": "microsoft",
"version": "2.2"
},
{
"model": ".net core",
"scope": "eq",
"trust": 2.1,
"vendor": "microsoft",
"version": "2.1"
},
{
"model": ".net core",
"scope": "eq",
"trust": 2.1,
"vendor": "microsoft",
"version": "1.1"
},
{
"model": ".net core",
"scope": "eq",
"trust": 2.1,
"vendor": "microsoft",
"version": "1.0"
},
{
"model": ".net framework",
"scope": "eq",
"trust": 1.3,
"vendor": "microsoft",
"version": "3.0"
},
{
"model": ".net framework",
"scope": "eq",
"trust": 1.3,
"vendor": "microsoft",
"version": "2.0"
},
{
"model": "enterprise linux server tus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "8.2"
},
{
"model": "enterprise linux server tus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "8.4"
},
{
"model": "enterprise linux server aus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "8.6"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "8.0"
},
{
"model": "enterprise linux eus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "8.6"
},
{
"model": "enterprise linux server aus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "8.2"
},
{
"model": "enterprise linux server aus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "8.4"
},
{
"model": "enterprise linux eus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "8.1"
},
{
"model": "enterprise linux eus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "8.2"
},
{
"model": "enterprise linux eus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "8.4"
},
{
"model": "enterprise linux server tus",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "8.6"
},
{
"model": ".net framework",
"scope": "eq",
"trust": 0.8,
"vendor": "microsoft",
"version": "2.0 sp2"
},
{
"model": ".net framework",
"scope": "eq",
"trust": 0.8,
"vendor": "microsoft",
"version": "3.0 sp2"
},
{
"model": "powershell core",
"scope": "eq",
"trust": 0.8,
"vendor": "microsoft",
"version": "6.1"
},
{
"model": "powershell core",
"scope": "eq",
"trust": 0.8,
"vendor": "microsoft",
"version": "6.2"
}
],
"sources": [
{
"db": "BID",
"id": "108245"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003848"
},
{
"db": "NVD",
"id": "CVE-2019-0820"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_core:1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_core:1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_core:2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_core:2.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2019-0820"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Red Hat,Microsoft",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201905-419"
}
],
"trust": 0.6
},
"cve": "CVE-2019-0820",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 5.0,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2019-0820",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.9,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2019-0820",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2019-0820",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201905-419",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2019-0820",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2019-0820"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003848"
},
{
"db": "NVD",
"id": "CVE-2019-0820"
},
{
"db": "CNNVD",
"id": "CNNVD-201905-419"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981. This vulnerability CVE-2019-0980 and CVE-2019-0981 Is a different vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. \nAn attacker can exploit this issue to cause a denial of service condition. \n\nBug Fix(es):\n\n* dotnet: new SocketException((int)SocketError.InvalidArgument).Message is\nempty (BZ#1712471)\n\n4. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n==================================================================== \nRed Hat Security Advisory\n\nSynopsis: Moderate: .NET Core on Red Hat Enterprise Linux security and bug fix update\nAdvisory ID: RHSA-2019:1236-01\nProduct: .NET Core on Red Hat Enterprise Linux\nAdvisory URL: https://access.redhat.com/errata/RHSA-2019:1236\nIssue date: 2019-05-15\nCVE Names: CVE-2019-0820 CVE-2019-0980 CVE-2019-0981\n====================================================================\n1. Summary:\n\nUpdates for rh-dotnetcore10-dotnetcore, rh-dotnetcore11-dotnetcore,\nrh-dotnet21-dotnet, rh-dotnet22-dotnet and rh-dotnet22-curl are now\navailable for .NET Core on Red Hat Enterprise Linux 7. \n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\n.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64\n.NET Core on Red Hat Enterprise Linux Server (v. 7) - x86_64\n.NET Core on Red Hat Enterprise Linux Workstation (v. 7) - x86_64\n\n3. It implements a subset of the\n.NET framework APIs and several new APIs, and it includes a CLR\nimplementation. \n\nNew versions of .NET Core that address security vulnerabilities are now\navailable. The updated versions are .NET Core 1.0.16, 1.1.13, 2.1.11, and\n2.2.5. \n\nSecurity Fix(es):\n\n* dotNET: timeouts for regular expressions are not enforced (CVE-2019-0820)\n\n* dotNET: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of\nService (CVE-2019-0980)\n\n* dotNET: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of\nService (CVE-2019-0981)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\nBug Fix(es):\n\n* Re-enable bash completion in rh-dotnet22-dotnet (BZ#1654863)\n\n* Error rebuilding rh-dotnet22-curl in CentOS (BZ#1678932)\n\n* Broken apphost caused by unset DOTNET_ROOT (BZ#1703479)\n\n* Make bash completion compatible with rh-dotnet22 packages (BZ#1705259)\n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1654863 - Re-enable bash completion in rh-dotnet22-dotnet\n1678932 - Error rebuilding rh-dotnet22-curl in CentOS\n1703479 - Broken apphost caused by unset DOTNET_ROOT\n1703508 - Update to .NET Core 1.1.13\n1704454 - Update to .NET Core 1.0.16\n1704934 - Update to .NET Core Runtime 2.2.5 and SDK 2.2.107\n1705147 - Update to .NET Core Runtime 2.1.11 and SDK 2.1.507\n1705259 - Make bash completion compatible with rh-dotnet22 packages\n1705502 - CVE-2019-0980 dotNET: infinite loop in URI.TryCreate leading to ASP.Net Core Denial of Service\n1705504 - CVE-2019-0981 dotNET: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service\n1705506 - CVE-2019-0820 dotNET: timeouts for regular expressions are not enforced\n\n6. Package List:\n\n.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7):\n\nSource:\nrh-dotnetcore10-dotnetcore-1.0.16-1.el7.src.rpm\n\nx86_64:\nrh-dotnetcore10-dotnetcore-1.0.16-1.el7.x86_64.rpm\nrh-dotnetcore10-dotnetcore-debuginfo-1.0.16-1.el7.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7):\n\nSource:\nrh-dotnetcore11-dotnetcore-1.1.13-1.el7.src.rpm\n\nx86_64:\nrh-dotnetcore11-dotnetcore-1.1.13-1.el7.x86_64.rpm\nrh-dotnetcore11-dotnetcore-debuginfo-1.1.13-1.el7.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7):\n\nSource:\nrh-dotnet21-2.1-10.el7.src.rpm\nrh-dotnet21-dotnet-2.1.507-2.el7.src.rpm\n\nx86_64:\nrh-dotnet21-2.1-10.el7.x86_64.rpm\nrh-dotnet21-dotnet-2.1.507-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-debuginfo-2.1.507-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-host-2.1.11-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-runtime-2.1-2.1.11-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-sdk-2.1-2.1.507-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-sdk-2.1.5xx-2.1.507-2.el7.x86_64.rpm\nrh-dotnet21-runtime-2.1-10.el7.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7):\n\nSource:\nrh-dotnet22-2.2-7.el7.src.rpm\nrh-dotnet22-curl-7.61.1-2.el7.src.rpm\nrh-dotnet22-dotnet-2.2.107-2.el7.src.rpm\n\nx86_64:\nrh-dotnet22-2.2-7.el7.x86_64.rpm\nrh-dotnet22-curl-7.61.1-2.el7.x86_64.rpm\nrh-dotnet22-curl-debuginfo-7.61.1-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-2.2.107-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-debuginfo-2.2.107-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-host-2.2.5-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-host-fxr-2.2-2.2.5-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-runtime-2.2-2.2.5-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-sdk-2.2-2.2.107-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-sdk-2.2.1xx-2.2.107-2.el7.x86_64.rpm\nrh-dotnet22-libcurl-7.61.1-2.el7.x86_64.rpm\nrh-dotnet22-libcurl-devel-7.61.1-2.el7.x86_64.rpm\nrh-dotnet22-runtime-2.2-7.el7.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux Server (v. 7):\n\nSource:\nrh-dotnetcore10-dotnetcore-1.0.16-1.el7.src.rpm\n\nx86_64:\nrh-dotnetcore10-dotnetcore-1.0.16-1.el7.x86_64.rpm\nrh-dotnetcore10-dotnetcore-debuginfo-1.0.16-1.el7.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux Server (v. 7):\n\nSource:\nrh-dotnetcore11-dotnetcore-1.1.13-1.el7.src.rpm\n\nx86_64:\nrh-dotnetcore11-dotnetcore-1.1.13-1.el7.x86_64.rpm\nrh-dotnetcore11-dotnetcore-debuginfo-1.1.13-1.el7.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux Server (v. 7):\n\nSource:\nrh-dotnet21-2.1-10.el7.src.rpm\nrh-dotnet21-dotnet-2.1.507-2.el7.src.rpm\n\nx86_64:\nrh-dotnet21-2.1-10.el7.x86_64.rpm\nrh-dotnet21-dotnet-2.1.507-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-debuginfo-2.1.507-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-host-2.1.11-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-runtime-2.1-2.1.11-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-sdk-2.1-2.1.507-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-sdk-2.1.5xx-2.1.507-2.el7.x86_64.rpm\nrh-dotnet21-runtime-2.1-10.el7.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux Server (v. 7):\n\nSource:\nrh-dotnet22-2.2-7.el7.src.rpm\nrh-dotnet22-curl-7.61.1-2.el7.src.rpm\nrh-dotnet22-dotnet-2.2.107-2.el7.src.rpm\n\nx86_64:\nrh-dotnet22-2.2-7.el7.x86_64.rpm\nrh-dotnet22-curl-7.61.1-2.el7.x86_64.rpm\nrh-dotnet22-curl-debuginfo-7.61.1-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-2.2.107-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-debuginfo-2.2.107-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-host-2.2.5-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-host-fxr-2.2-2.2.5-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-runtime-2.2-2.2.5-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-sdk-2.2-2.2.107-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-sdk-2.2.1xx-2.2.107-2.el7.x86_64.rpm\nrh-dotnet22-libcurl-7.61.1-2.el7.x86_64.rpm\nrh-dotnet22-libcurl-devel-7.61.1-2.el7.x86_64.rpm\nrh-dotnet22-runtime-2.2-7.el7.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nrh-dotnetcore10-dotnetcore-1.0.16-1.el7.src.rpm\n\nx86_64:\nrh-dotnetcore10-dotnetcore-1.0.16-1.el7.x86_64.rpm\nrh-dotnetcore10-dotnetcore-debuginfo-1.0.16-1.el7.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nrh-dotnetcore11-dotnetcore-1.1.13-1.el7.src.rpm\n\nx86_64:\nrh-dotnetcore11-dotnetcore-1.1.13-1.el7.x86_64.rpm\nrh-dotnetcore11-dotnetcore-debuginfo-1.1.13-1.el7.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nrh-dotnet21-2.1-10.el7.src.rpm\nrh-dotnet21-dotnet-2.1.507-2.el7.src.rpm\n\nx86_64:\nrh-dotnet21-2.1-10.el7.x86_64.rpm\nrh-dotnet21-dotnet-2.1.507-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-debuginfo-2.1.507-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-host-2.1.11-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-runtime-2.1-2.1.11-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-sdk-2.1-2.1.507-2.el7.x86_64.rpm\nrh-dotnet21-dotnet-sdk-2.1.5xx-2.1.507-2.el7.x86_64.rpm\nrh-dotnet21-runtime-2.1-10.el7.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nrh-dotnet22-2.2-7.el7.src.rpm\nrh-dotnet22-curl-7.61.1-2.el7.src.rpm\nrh-dotnet22-dotnet-2.2.107-2.el7.src.rpm\n\nx86_64:\nrh-dotnet22-2.2-7.el7.x86_64.rpm\nrh-dotnet22-curl-7.61.1-2.el7.x86_64.rpm\nrh-dotnet22-curl-debuginfo-7.61.1-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-2.2.107-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-debuginfo-2.2.107-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-host-2.2.5-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-host-fxr-2.2-2.2.5-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-runtime-2.2-2.2.5-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-sdk-2.2-2.2.107-2.el7.x86_64.rpm\nrh-dotnet22-dotnet-sdk-2.2.1xx-2.2.107-2.el7.x86_64.rpm\nrh-dotnet22-libcurl-7.61.1-2.el7.x86_64.rpm\nrh-dotnet22-libcurl-devel-7.61.1-2.el7.x86_64.rpm\nrh-dotnet22-runtime-2.2-7.el7.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2019-0820\nhttps://access.redhat.com/security/cve/CVE-2019-0980\nhttps://access.redhat.com/security/cve/CVE-2019-0981\nhttps://access.redhat.com/security/updates/classification/#moderate\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2019 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\nKCZo5tPFVoU=dJ6F\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-0820"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003848"
},
{
"db": "BID",
"id": "108245"
},
{
"db": "VULMON",
"id": "CVE-2019-0820"
},
{
"db": "PACKETSTORM",
"id": "152999"
},
{
"db": "PACKETSTORM",
"id": "152953"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-0820",
"trust": 3.0
},
{
"db": "BID",
"id": "108245",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003848",
"trust": 0.8
},
{
"db": "PACKETSTORM",
"id": "152999",
"trust": 0.7
},
{
"db": "PACKETSTORM",
"id": "152953",
"trust": 0.7
},
{
"db": "AUSCERT",
"id": "ESB-2019.1839",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2019.1740",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201905-419",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2019-0820",
"trust": 0.1
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2019-0820"
},
{
"db": "BID",
"id": "108245"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003848"
},
{
"db": "PACKETSTORM",
"id": "152999"
},
{
"db": "PACKETSTORM",
"id": "152953"
},
{
"db": "NVD",
"id": "CVE-2019-0820"
},
{
"db": "CNNVD",
"id": "CNNVD-201905-419"
}
]
},
"id": "VAR-201905-0991",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VARIoT devices database",
"id": null
}
],
"trust": 0.21178882
},
"last_update_date": "2023-12-18T13:02:13.402000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "CVE-2019-0820 | .NET Framework and .NET Core Denial of Service Vulnerability",
"trust": 0.8,
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-0820"
},
{
"title": "CVE-2019-0820 | .NET Framework \u3068 .NET Core \u306e\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u306e\u8106\u5f31\u6027",
"trust": 0.8,
"url": "https://portal.msrc.microsoft.com/ja-jp/security-guidance/advisory/cve-2019-0820"
},
{
"title": "Microsoft .NET Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=92588"
},
{
"title": "Red Hat: Moderate: .NET Core on Red Hat Enterprise Linux security and bug fix update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20191236 - security advisory"
},
{
"title": "Red Hat: Important: dotnet security, bug fix, and enhancement update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20191259 - security advisory"
},
{
"title": "snowflake-connector-net",
"trust": 0.1,
"url": "https://github.com/snowflakedb/snowflake-connector-net "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/tortugaresearch/tortuga.data.snowflake "
},
{
"title": "Symantec Threat Intelligence Blog",
"trust": 0.1,
"url": "https://www.symantec.com/blogs/threat-intelligence/microsoft-patch-tuesday-may-2019"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2019-0820"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003848"
},
{
"db": "CNNVD",
"id": "CNNVD-201905-419"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-400",
"trust": 1.0
},
{
"problemtype": "CWE-20",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-003848"
},
{
"db": "NVD",
"id": "CVE-2019-0820"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "https://access.redhat.com/errata/rhsa-2019:1259"
},
{
"trust": 2.2,
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-0820"
},
{
"trust": 1.6,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-0820"
},
{
"trust": 0.9,
"url": "http://www.microsoft.com"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0820"
},
{
"trust": 0.8,
"url": "https://www.ipa.go.jp/security/ciadr/vul/20190515-ms.html"
},
{
"trust": 0.8,
"url": "http://www.jpcert.or.jp/at/2019/at190023.html"
},
{
"trust": 0.7,
"url": "https://www.securityfocus.com/bid/108245"
},
{
"trust": 0.7,
"url": "https://access.redhat.com/errata/rhsa-2019:1236"
},
{
"trust": 0.6,
"url": "https://packetstormsecurity.com/files/152999/red-hat-security-advisory-2019-1259-01.html"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/81042"
},
{
"trust": 0.6,
"url": "https://packetstormsecurity.com/files/152953/red-hat-security-advisory-2019-1236-01.html"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2019.1839/"
},
{
"trust": 0.6,
"url": "https://vigilance.fr/vulnerability/microsoft-net-vulnerabilities-of-may-2019-29296"
},
{
"trust": 0.2,
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-0980"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-0981"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/articles/11258"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2019-0980"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/team/contact/"
},
{
"trust": 0.2,
"url": "https://www.redhat.com/mailman/listinfo/rhsa-announce"
},
{
"trust": 0.2,
"url": "https://bugzilla.redhat.com/):"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2019-0981"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-0980"
},
{
"trust": 0.2,
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-0981"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/team/key/"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2019-0820"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/400.html"
},
{
"trust": 0.1,
"url": "https://github.com/snowflakedb/snowflake-connector-net"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108245"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-0757"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2019-0757"
},
{
"trust": 0.1,
"url": "https://github.com/dotnet/core/blob/master/release-notes/2.1/2.1.11/2.1.11.md"
},
{
"trust": 0.1,
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-0757"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/updates/classification/#moderate"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2019-0820"
},
{
"db": "BID",
"id": "108245"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003848"
},
{
"db": "PACKETSTORM",
"id": "152999"
},
{
"db": "PACKETSTORM",
"id": "152953"
},
{
"db": "NVD",
"id": "CVE-2019-0820"
},
{
"db": "CNNVD",
"id": "CNNVD-201905-419"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULMON",
"id": "CVE-2019-0820"
},
{
"db": "BID",
"id": "108245"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003848"
},
{
"db": "PACKETSTORM",
"id": "152999"
},
{
"db": "PACKETSTORM",
"id": "152953"
},
{
"db": "NVD",
"id": "CVE-2019-0820"
},
{
"db": "CNNVD",
"id": "CNNVD-201905-419"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-05-16T00:00:00",
"db": "VULMON",
"id": "CVE-2019-0820"
},
{
"date": "2019-05-14T00:00:00",
"db": "BID",
"id": "108245"
},
{
"date": "2019-05-23T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-003848"
},
{
"date": "2019-05-22T14:39:27",
"db": "PACKETSTORM",
"id": "152999"
},
{
"date": "2019-05-16T23:05:23",
"db": "PACKETSTORM",
"id": "152953"
},
{
"date": "2019-05-16T19:29:00.880000",
"db": "NVD",
"id": "CVE-2019-0820"
},
{
"date": "2019-05-14T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201905-419"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-02-02T00:00:00",
"db": "VULMON",
"id": "CVE-2019-0820"
},
{
"date": "2019-05-14T00:00:00",
"db": "BID",
"id": "108245"
},
{
"date": "2019-05-23T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-003848"
},
{
"date": "2023-02-02T19:16:40.193000",
"db": "NVD",
"id": "CVE-2019-0820"
},
{
"date": "2021-08-16T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201905-419"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201905-419"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": ".NET Framework and .NET Core Vulnerable to denial of service operation",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-003848"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "resource management error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201905-419"
}
],
"trust": 0.6
}
}
CVE-2019-0820
Vulnerability from fkie_nvd
Published
2019-05-16 19:29
Modified
2024-11-21 04:17
Severity ?
Summary
A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| secure@microsoft.com | https://access.redhat.com/errata/RHSA-2019:1259 | Third Party Advisory | |
| secure@microsoft.com | https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820 | Patch, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2019:1259 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820 | Patch, Vendor Advisory |
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_core:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "9EDF760A-C775-457E-8091-586E56545B07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_core:1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2F87DCF0-0552-4815-8148-C9894397C5EF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_core:2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3BF7E3F6-D3AE-404D-8F0E-0C57BF23006C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_core:2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A5AB75F9-B0FC-46B5-A863-0458696773DB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
"matchCriteriaId": "42A6DF09-B8E1-414D-97E7-453566055279",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*",
"matchCriteriaId": "D400E856-2B2E-4CEA-8CA5-309FDF371CEA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "E039CE1F-B988-4741-AE2E-5B36E2AF9688",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "21540673-614A-4D40-8BD7-3F07723803B0",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
"matchCriteriaId": "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
"matchCriteriaId": "AEE2E768-0F45-46E1-B6D7-087917109D98",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
"matchCriteriaId": "83B14968-3985-43C3-ACE5-8307196EFAE3",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
"matchCriteriaId": "7CB85C75-4D35-480E-843D-60579EC75FCB",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
"matchCriteriaId": "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*",
"matchCriteriaId": "3FB5CDAE-C713-4D9D-9D6A-2C2E8924A4BB",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*",
"matchCriteriaId": "CAACE735-003E-4ACB-A82E-C0CF97D7F013",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*",
"matchCriteriaId": "5B921FDB-8E7D-427E-82BE-4432585080CF",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8EDC4407-7E92-4E60-82F0-0C87D1860D3A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
"matchCriteriaId": "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
"matchCriteriaId": "B320A104-9037-487E-BC9A-62B4A6B49FD0",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "40B3A045-B08A-44E0-91BE-726753F6A362",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
"matchCriteriaId": "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C6CE5198-C498-4672-AF4C-77AB4BE06C5C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
"matchCriteriaId": "280FE663-23BE-45D2-9B31-5F577E390B48",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
"matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "21540673-614A-4D40-8BD7-3F07723803B0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"matchCriteriaId": "734112B3-1383-4BE3-8721-C0F84566B764",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "36B0E40A-84EF-4099-A395-75D6B8CDA196",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
"matchCriteriaId": "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
"matchCriteriaId": "280FE663-23BE-45D2-9B31-5F577E390B48",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FF0B660D-1F30-4D45-B98B-726EDB8CB90F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"matchCriteriaId": "734112B3-1383-4BE3-8721-C0F84566B764",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "36B0E40A-84EF-4099-A395-75D6B8CDA196",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
"matchCriteriaId": "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C6CE5198-C498-4672-AF4C-77AB4BE06C5C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "36B0E40A-84EF-4099-A395-75D6B8CDA196",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
"matchCriteriaId": "83B14968-3985-43C3-ACE5-8307196EFAE3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
"matchCriteriaId": "7CB85C75-4D35-480E-843D-60579EC75FCB",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
"matchCriteriaId": "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"matchCriteriaId": "734112B3-1383-4BE3-8721-C0F84566B764",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "36B0E40A-84EF-4099-A395-75D6B8CDA196",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
"matchCriteriaId": "AEE2E768-0F45-46E1-B6D7-087917109D98",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
"matchCriteriaId": "2D3F18AF-84ED-473B-A8DF-65EB23C475AF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
"matchCriteriaId": "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
"matchCriteriaId": "AEE2E768-0F45-46E1-B6D7-087917109D98",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
"matchCriteriaId": "83B14968-3985-43C3-ACE5-8307196EFAE3",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
"matchCriteriaId": "7CB85C75-4D35-480E-843D-60579EC75FCB",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
"matchCriteriaId": "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*",
"matchCriteriaId": "3FB5CDAE-C713-4D9D-9D6A-2C2E8924A4BB",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
"matchCriteriaId": "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C6CE5198-C498-4672-AF4C-77AB4BE06C5C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*",
"matchCriteriaId": "CAACE735-003E-4ACB-A82E-C0CF97D7F013",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*",
"matchCriteriaId": "5B921FDB-8E7D-427E-82BE-4432585080CF",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "92BC9265-6959-4D37-BE5E-8C45E98992F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*",
"matchCriteriaId": "831F0F47-3565-4763-B16F-C87B1FF2035E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*",
"matchCriteriaId": "0E3F09B5-569F-4C58-9FCA-3C0953D107B5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*",
"matchCriteriaId": "6C3741B8-851F-475D-B428-523F4F722350",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*",
"matchCriteriaId": "6897676D-53F9-45B3-B27F-7FF9A4C58D33",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*",
"matchCriteriaId": "E28F226A-CBC7-4A32-BE58-398FA5B42481",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*",
"matchCriteriaId": "76C24D94-834A-4E9D-8F73-624AFA99AAA2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B09ACF2D-D83F-4A86-8185-9569605D8EE1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*",
"matchCriteriaId": "AC10D919-57FD-4725-B8D2-39ECB476902F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*",
"matchCriteriaId": "1272DF03-7674-4BD4-8E64-94004B195448",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka \u0027.NET Framework and .NET Core Denial of Service Vulnerability\u0027. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981."
},
{
"lang": "es",
"value": "Existe una vulnerabilidad de Denegaci\u00f3n de Servicio (DoS) cuando .NET Framework y .NET Core procesan inapropiadamente cadenas RegEx, conocidas como \".NET Framework y .NET Core Denial of Service Vulnerability\". Este ID de CVE es diferente de CVE-2019-0980, CVE-2019-0981."
}
],
"id": "CVE-2019-0820",
"lastModified": "2024-11-21T04:17:20.210",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2019-05-16T19:29:00.880",
"references": [
{
"source": "secure@microsoft.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
},
{
"source": "secure@microsoft.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1259"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-400"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.