Vulnerability CVE-2021-26701: Information

Description

.NET Core Remote Code Execution Vulnerability

Severity: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Published: Feb. 26, 2021
Modified: Dec. 29, 2023

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
dotnet-aspnetcore-5.0p105.0.7-alt15.0.17-alt1ALT-PU-2021-2111-1276449Fixed
dotnet-aspnetcore-5.0p95.0.14-alt15.0.14-alt1ALT-PU-2022-1546-1295274Fixed
dotnet-aspnetcore-5.0c10f15.0.7-alt15.0.17-alt1ALT-PU-2021-2111-1276449Fixed
dotnet-bootstrap-3.1p103.1.16-alt13.1.32-alt1ALT-PU-2021-2098-1276447Fixed
dotnet-bootstrap-3.1p93.1.22-alt13.1.22-alt1ALT-PU-2022-1548-1295274Fixed
dotnet-bootstrap-3.1c10f13.1.16-alt13.1.32-alt1ALT-PU-2021-2098-1276447Fixed
dotnet-bootstrap-5.0p105.0.7-alt15.0.17-alt1ALT-PU-2021-2109-1276449Fixed
dotnet-bootstrap-5.0p95.0.14-alt15.0.14-alt1ALT-PU-2022-1544-1295274Fixed
dotnet-bootstrap-5.0c10f15.0.7-alt15.0.17-alt1ALT-PU-2021-2109-1276449Fixed
dotnet-runtime-5.0p105.0.7-alt15.0.17-alt1ALT-PU-2021-2110-1276449Fixed
dotnet-runtime-5.0p95.0.14-alt15.0.14-alt1ALT-PU-2022-1545-1295274Fixed
dotnet-runtime-5.0c10f15.0.7-alt15.0.17-alt1ALT-PU-2021-2110-1276449Fixed
dotnet-sdk-5.0p105.0.204-alt15.0.408-alt2ALT-PU-2021-2112-1276449Fixed
dotnet-sdk-5.0p95.0.405-alt15.0.405-alt1ALT-PU-2022-1547-1295274Fixed
dotnet-sdk-5.0c10f15.0.204-alt15.0.408-alt1ALT-PU-2021-2112-1276449Fixed

References to Advisories, Solutions, and Tools

    1. Configuration 1

      cpe:2.3:a:microsoft:visual_studio_2019:-:*:*:*:*:macos:*:*

      cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
      Start including
      16.0
      End including
      16.9

      cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*
      Start including
      3.1
      End excliding
      3.1.15

      cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*
      Start including
      2.1
      End excliding
      2.1.28

      cpe:2.3:a:microsoft:powershell_core:7.0:*:*:*:*:*:*:*

      cpe:2.3:a:microsoft:powershell_core:7.1:*:*:*:*:*:*:*

      cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
      Start including
      5.0
      End excliding
      5.0.4

      Configuration 2

      cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

      cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

      cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*