NuGet/Microsoft.NETCore.App.Runtime.linux-musl-arm64 CVE-2021-34485: medium 5.5, EPSS 2.07%
.NET Core Information Disclosure Vulnerability
Action: Upgrade Microsoft.NETCore.App.Runtime.linux-musl-arm64 to 3.1.18 (3.x) or 5.0.9 (5.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.1.0 | 3.1.18 | - |
| 5.0.0 | 5.0.9 | - |
Fixed versions
| 3.1.18 | 5.0.9 |
Sources
- osv: GHSA-vgwq-hfqc-58wv#NuGet/Microsoft.NETCore.App.Runtime.linux-musl-arm64
- https://github.com/dotnet/runtime/security/advisories/GHSA-vgwq-hfqc-58wv
- https://nvd.nist.gov/vuln/detail/CVE-2021-34485
- https://github.com/dotnet/announcements/issues/196
- https://github.com/github/advisory-database/issues/741
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34485
CVE-2021-34485 · published · modified · JSON