Most recent entries from all

bdu:2021-00931

BIT-dotnet-2021-26701 — .NET Core Remote Code Execution Vulnerability

Affected: Bitnami: dotnet

.NET Core Remote Code Execution Vulnerability

certfr-2021-avi-106 — De multiples vulnérabilités ont été corrigées dans Microsoft .Net. Elles permettent à un at…

certfr-2021-avi-106

cnvd-2021-14788

EUVD-2026-322627

fkie_cve-2021-26701

.NET Core Remote Code Execution Vulnerability

GHSA-ghhp-997w-qr28 — .NET Core Remote Code Execution Vulnerability

Affected: NuGet: System.Text.Encodings.Web

.NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112.

### Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0, .NET Core 3.1, and .NET Core 2.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A remote code execution vulnerability exists in .NET 5 and .NET Core due to how text encoding is performed.

### Discussion

Discussion for this issue can be found at dotnet/runtime#49377

### Mitigation factors

Microsoft has not identified any mitigating factors for this vulnerability.

### Affected software

The vulnerable package is `System.Text.Encodings.Web` . Upgrading your package and redeploying your app should be sufficient to address this vulnerability.

Vulnerable package versions:

Any .NET 5, .NET Core, or .NET Framework based application that uses the System.Text.Encodings.Web package with a vulnerable version listed below.

Package Name | Vulnerable Versions | Secure Versions -|-|- System.Text.Encodings.Web | 4.0.0 - 4.5.0 | 4.5.1 System.Text.Encodings.Web | 4.6.0-4.7.1 | 4.7.2 System.Text.Encodings.Web | 5.0.0 | 5.0.1

Please validate that each of the .NET versions you are using is in support. Security updates are only provided for supported .NET versions.

gsd-2021-26701

RHSA-2021:0787 — Red Hat Security Advisory: .NET Core 2.1 on Red Hat Enterprise Linux security and bugfix update

dotnet: System.Text.Encodings.Web Remote Code Execution

RHSA-2021:0788 — Red Hat Security Advisory: dotnet security and bugfix update

dotnet: System.Text.Encodings.Web Remote Code Execution