Medium, CVSS 6.5NuGetPublished
Denial of service in .NET core
CVE-2021-1721 · GHSA-3gp9-h8hw-pxpw
- Affected
- NuGet microsoft.netcore.app.host.linux-musl-x64 >= 3.1.0, < 3.1.12
- Fixed in
- 3.1.12· Vendor fix available
- Issue
- .NET Core and Visual Studio Denial of Service Vulnerability due to a vulnerability which exists when creating HTTPS web request during X509 certificate chain building.
Recommended action: Upgrade to 3.1.12 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.