Tampering vulnerability in .NET Core

MOYENNE 6.5CVE-2018-8416 · GHSA-5633-f33j-c6f7 · Published 14/11/2018 · updated 17/06/2026

En bref

CVE-2018-8416 est une vulnérabilité MOYENNE (CVSS 6.5) touchant Microsoft.NETCore.App, asp.net core (microsoft).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 7.3%, plus élevée que 94.3% des vulnérabilités.
Correctif : mettre à jour vers 2.1.7 ou plus récent.

Package	Affected versions	Patched versions
Microsoft.NETCore.App NuGet	`≥ 2.1.0, < 2.1.7`	`2.1.7`
asp.net core microsoft	`= 2.1`	No fix yet

Description

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

NVD description

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

References

nvd.nist.gov/vuln/detail/CVE-2018-8416 · ADVISORY
dotnet/announcements · WEB
github/advisory-database · WEB
access.redhat.com/errata/RHSA-2018:3676 · WEB
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8416 · WEB
securityfocus.com/bid/105798 · Third Party Advisory
securitytracker.com/id/1042128 · Third Party Advisory

Autres vulnérabilités de Microsoft.NETCore.App

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

Microsoft.NETCore.App

NuGet

≥ 2.1.0, < 2.1.7

2.1.7

asp.net core

microsoft

= 2.1

No fix yet

Description

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

NVD description

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

Autres vulnérabilités de Microsoft.NETCore.App

Tout voir →