{"id":"CVE-2021-26423","aliases":["BIT-dotnet-2021-26423","BIT-dotnet-sdk-2021-26423","EUVD-2022-7160","GHSA-rh58-r7jh-xhx3","RHSA-2021:3142","RHSA-2021:3143","RHSA-2021:3147","RHSA-2021:3148"],"status":"published","title":".NET Core and Visual Studio Denial of Service Vulnerability","description":".NET Core and Visual Studio Denial of Service Vulnerability","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.03902,"percentile":0.90416,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-08-12T18:11:31Z","modified":"2026-10-24T10:30:22Z","fixes":[{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.osx-x64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-x64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-x64","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.rhel.6-x64","fixed_in":["3.1.18"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"Bitnami","package":"dotnet","fixed_in":["5.0.9"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"dotnet-sdk","fixed_in":["5.0.9"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.rhel.6-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"dotnet","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"dotnet-sdk","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.rhel.6-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-aspnetcore-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-aspnetcore-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-apphost-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-hostfxr-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-sdk-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-templates-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet5.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3}],"products":[{"vendor":"microsoft","product":".net"},{"vendor":"microsoft","product":".net 5.0"},{"vendor":"microsoft","product":".net core 2.1"},{"vendor":"microsoft","product":".net core 3.1"},{"vendor":"microsoft","product":".net_core"},{"vendor":"microsoft","product":"microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)"},{"vendor":"microsoft","product":"microsoft visual studio 2019 version 16.10 (includes 16.0 - 16.9)"},{"vendor":"microsoft","product":"microsoft visual studio 2019 version 16.4 (includes 16.0 - 16.3)"},{"vendor":"microsoft","product":"microsoft visual studio 2019 version 16.7 (includes 16.0 – 16.6)"},{"vendor":"microsoft","product":"microsoft visual studio 2019 version 16.9 (includes 16.0 - 16.8)"},{"vendor":"microsoft","product":"powershell core 7.0"},{"vendor":"microsoft","product":"powershell core 7.1"},{"vendor":"microsoft","product":"powershell_core"},{"vendor":"microsoft","product":"visual studio 2019 for mac version 8.10"},{"vendor":"microsoft","product":"visual_studio_2017"},{"vendor":"microsoft","product":"visual_studio_2019"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26423","tags":["vendor-advisory","patch","web","article"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26423","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory","fix","web"]},{"url":"https://github.com/dotnet/runtime/security/advisories/GHSA-rh58-r7jh-xhx3","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26423","tags":["web","advisory"]},{"url":"https://github.com/dotnet/announcements/issues/194","tags":["web","article"]},{"url":"https://github.com/advisories/GHSA-rh58-r7jh-xhx3"},{"url":"https://access.redhat.com/errata/RHSA-2021:3142","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990300","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3142.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-26423","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-26423","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-34485","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-34485","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34485","tags":["advisory"]},{"url":"https://github.com/dotnet/announcements/issues/196","tags":["article"]},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34485","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-34532","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-34532","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34532","tags":["advisory"]},{"url":"https://github.com/dotnet/announcements/issues/195","tags":["article"]},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34532","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3143","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3143.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3147","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3147.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3148","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3148.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-26423","title":".NET Core and Visual Studio Denial of Service Vulnerability","description":".NET Core and Visual Studio Denial of Service Vulnerability","status":"published","published":"2021-08-12T18:11:31Z","modified":"2026-08-10T15:09:59.739Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:32:57.033395Z"}],"euvd":[{"id":"EUVD-2022-7160","description":".NET Core and Visual Studio Denial of Service Vulnerability","status":"published","published":"2021-08-12T18:11:31Z","modified":"2026-08-10T15:09:59Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T18:02:05.388264Z"}],"ghsa":[{"id":"GHSA-rh58-r7jh-xhx3","title":".NET Core Elevation of Privilege Vulnerability","description":"Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0 and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nA denial of service vulnerability exists in .NET 5.0, .NET Core 3.1 and .NET Core 2.1 where .NET (Core) server applications providing WebSocket endpoints could be tricked into endlessly looping while trying to read a single WebSocket frame. \n\n### Patches\n\n* If you're using .NET 5.0, you should download and install Runtime 5.0.9 or SDK 5.0.206 (for Visual Studio 2019 v16.8) or SDK 5.0.303 (for Visual Studio 2019 V16.10) from https://dotnet.microsoft.com/download/dotnet-core/5.0.\n\n* If you're using .NET Core 3.1, you should download and install Runtime 3.1.18 or SDK 3.1.118 (for Visual Studio 2019 v16.4) or 3.1.412 (for Visual Studio 2019 v16.7 or later) from https://dotnet.microsoft.com/download/dotnet-core/3.1.\n\n* If you're using .NET Core 2.1, you should download and install Runtime 2.1.29 or SDK 2.1.525 (for Visual Studio 2019 v15.9) or 2.1.817 from https://dotnet.microsoft.com/download/dotnet-core/2.1.\n\n\n#### Other Details\n\n- Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/194\n- An Issue for this can be found at https://github.com/dotnet/runtime/issues/57175\n- MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-26423\n","status":"published","published":"2022-10-25T17:33:12Z","modified":"2023-01-30T05:02:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T14:36:27.500048Z"}],"nvd":[{"id":"CVE-2021-26423","description":".NET Core and Visual Studio Denial of Service Vulnerability","status":"published","published":"2021-08-12T18:15:08.537Z","modified":"2026-08-10T16:17:31.57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:56.943671Z"}],"osv":[{"id":"CVE-2021-26423","description":".NET Core and Visual Studio Denial of Service Vulnerability","status":"published","published":"2021-08-12T18:15:08.537Z","modified":"2026-10-24T10:30:22.223778263Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:18.778776Z"},{"id":"GHSA-rh58-r7jh-xhx3","title":".NET Core Elevation of Privilege Vulnerability","description":"Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0 and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nA denial of service vulnerability exists in .NET 5.0, .NET Core 3.1 and .NET Core 2.1 where .NET (Core) server applications providing WebSocket endpoints could be tricked into endlessly looping while trying to read a single WebSocket frame. \n\n### Patches\n\n* If you're using .NET 5.0, you should download and install Runtime 5.0.9 or SDK 5.0.206 (for Visual Studio 2019 v16.8) or SDK 5.0.303 (for Visual Studio 2019 V16.10) from https://dotnet.microsoft.com/download/dotnet-core/5.0.\n\n* If you're using .NET Core 3.1, you should download and install Runtime 3.1.18 or SDK 3.1.118 (for Visual Studio 2019 v16.4) or 3.1.412 (for Visual Studio 2019 v16.7 or later) from https://dotnet.microsoft.com/download/dotnet-core/3.1.\n\n* If you're using .NET Core 2.1, you should download and install Runtime 2.1.29 or SDK 2.1.525 (for Visual Studio 2019 v15.9) or 2.1.817 from https://dotnet.microsoft.com/download/dotnet-core/2.1.\n\n\n#### Other Details\n\n- Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/194\n- An Issue for this can be found at https://github.com/dotnet/runtime/issues/57175\n- MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-26423\n","status":"published","published":"2022-10-25T17:33:12Z","modified":"2024-12-01T05:38:38.177837Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:55.877614Z"},{"id":"RHSA-2021:3142","title":"Red Hat Security Advisory: .NET Core 3.1 security and bugfix update","status":"published","published":"2024-09-16T06:15:23Z","modified":"2026-10-08T10:02:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3143","title":"Red Hat Security Advisory: .NET Core 3.1 on RHEL 7 security and bugfix update","status":"published","published":"2024-09-16T06:15:16Z","modified":"2026-10-08T10:02:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3147","title":"Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update","status":"published","published":"2024-09-16T06:15:29Z","modified":"2026-10-08T10:02:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3148","title":"Red Hat Security Advisory: .NET 5.0 security and bugfix update","status":"published","published":"2024-09-16T06:15:36Z","modified":"2026-10-08T10:02:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"BIT-dotnet-2021-26423","title":".NET Core and Visual Studio Denial of Service Vulnerability","description":".NET Core and Visual Studio Denial of Service Vulnerability","status":"published","published":"2024-03-06T10:59:59.764Z","modified":"2026-09-08T08:46:46.290116162Z","updated_at":"2026-11-02T15:28:29.152062Z"},{"id":"BIT-dotnet-sdk-2021-26423","title":".NET Core and Visual Studio Denial of Service Vulnerability","description":".NET Core and Visual Studio Denial of Service Vulnerability","status":"published","published":"2024-03-06T11:00:11.892Z","modified":"2026-09-08T08:46:38.48355153Z","updated_at":"2026-11-02T15:28:29.152062Z"}]}}