Medium, CVSS 6.5NuGetPublished
Denial of service in .NET core
CVE-2021-1721 · GHSA-3gp9-h8hw-pxpw
- Affected
- NuGet microsoft.netcore.app.runtime.android-x86 >= 5.0.0, < 5.0.3
- Fixed in
- 5.0.3· Vendor fix available
- Issue
- .NET Core and Visual Studio Denial of Service Vulnerability due to a vulnerability which exists when creating HTTPS web request during X509 certificate chain building.
Recommended action: Upgrade to 5.0.3 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.