vulnerability

Oracle Linux: CVE-2021-1723: ELSA-2021-0095: dotnet3.1 security and bugfix update (IMPORTANT) (Multiple Advisories)

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
2021-01-12
Added
2021-01-15
Modified
2025-01-07

Description

ASP.NET Core and Visual Studio Denial of Service Vulnerability
A flaw was found in dotnet. Running callbacks outside of locks results in Krestel deadlock using HTTP2. The highest threat from this vulnerability is to system availability.

Solution(s)

oracle-linux-upgrade-aspnetcore-runtime-3-1oracle-linux-upgrade-aspnetcore-runtime-5-0oracle-linux-upgrade-aspnetcore-targeting-pack-3-1oracle-linux-upgrade-aspnetcore-targeting-pack-5-0oracle-linux-upgrade-dotnetoracle-linux-upgrade-dotnet-apphost-pack-3-1oracle-linux-upgrade-dotnet-apphost-pack-5-0oracle-linux-upgrade-dotnet-hostoracle-linux-upgrade-dotnet-hostfxr-3-1oracle-linux-upgrade-dotnet-hostfxr-5-0oracle-linux-upgrade-dotnet-runtime-3-1oracle-linux-upgrade-dotnet-runtime-5-0oracle-linux-upgrade-dotnet-sdk-3-1oracle-linux-upgrade-dotnet-sdk-5-0oracle-linux-upgrade-dotnet-targeting-pack-3-1oracle-linux-upgrade-dotnet-targeting-pack-5-0oracle-linux-upgrade-dotnet-templates-3-1oracle-linux-upgrade-dotnet-templates-5-0oracle-linux-upgrade-netstandard-targeting-pack-2-1
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.