Tampering vulnerability in .NET Core

MEDIUM 6.5CVE-2018-8416 · GHSA-5633-f33j-c6f7 · Published 14/11/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
Microsoft.NETCore.App NuGet	`≥ 2.1.0, < 2.1.7`	`2.1.7`
asp.net core microsoft	`= 2.1`	No fix yet

Description

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

NVD description

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

References

nvd.nist.gov/vuln/detail/CVE-2018-8416 · ADVISORY
dotnet/announcements · WEB
github/advisory-database · WEB
access.redhat.com/errata/RHSA-2018:3676 · WEB
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8416 · WEB
securityfocus.com/bid/105798 · Third Party Advisory
securitytracker.com/id/1042128 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free