CVE-2018-8416
Fixed in a distro release EPSS 7%
A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.
Products: Microsoft .NET Core
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| NuGet | Microsoft.NETCore.App | 2.1.7 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet | 0:2.1.500-5.el7 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-debuginfo | 0:2.1.500-5.el7 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-host | 0:2.1.6-5.el7 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-runtime-2.1 | 0:2.1.6-5.el7 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-sdk-2.1 | 0:2.1.500-5.el7 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-sdk-2.1.5xx | 0:2.1.500-5.el7 |
| Ubuntu 14.04 LTS | mono | no fix |
| Ubuntu 16.04 LTS | mono | no fix |
| Ubuntu 16.04 LTS | mono-reference-assemblies | no fix |
| Ubuntu 18.04 LTS | mono | no fix |
| Ubuntu 18.04 LTS | mono-reference-assemblies | no fix |
| Ubuntu 20.04 LTS | mono | no fix |
| Ubuntu 22.04 LTS | mono | no fix |
| Ubuntu 24.04 LTS | mono | no fix |
| Ubuntu 25.10 | mono | no fix |
| Ubuntu 26.04 LTS | mono | no fix |
| Ubuntu 26.10 | mono | no fix |