CVE-2019-0757
Fixed in a distro release EPSS 3%
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
Products: Microsoft Visual Studio, Microsoft .NET Core SDK, Microsoft Nuget, Microsoft Mono Framework
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 8 | dotnet | 0:2.1.507-2.el8_0 |
| Red Hat Enterprise Linux 8 | dotnet-debuginfo | 0:2.1.507-2.el8_0 |
| Red Hat Enterprise Linux 8 | dotnet-debugsource | 0:2.1.507-2.el8_0 |
| Red Hat Enterprise Linux 8 | dotnet-host | 0:2.1.11-2.el8_0 |
| Red Hat Enterprise Linux 8 | dotnet-host-debuginfo | 0:2.1.11-2.el8_0 |
| Red Hat Enterprise Linux 8 | dotnet-host-fxr-2.1 | 0:2.1.11-2.el8_0 |
| Red Hat Enterprise Linux 8 | dotnet-host-fxr-2.1-debuginfo | 0:2.1.11-2.el8_0 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-2.1 | 0:2.1.11-2.el8_0 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-2.1-debuginfo | 0:2.1.11-2.el8_0 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-2.1 | 0:2.1.507-2.el8_0 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-2.1.5xx | 0:2.1.507-2.el8_0 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-2.1.5xx-debuginfo | 0:2.1.507-2.el8_0 |
| Red Hat rhel dotnet 1.0 | rh-dotnetcore10-dotnetcore | 0:1.0.15-1.el7 |
| Red Hat rhel dotnet 1.0 | rh-dotnetcore10-dotnetcore-debuginfo | 0:1.0.15-1.el7 |
| Red Hat rhel dotnet 1.1 | rh-dotnetcore11-dotnetcore | 0:1.1.12-1.el7 |
| Red Hat rhel dotnet 1.1 | rh-dotnetcore11-dotnetcore-debuginfo | 0:1.1.12-1.el7 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21 | 0:2.1-8.el7 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet | 0:2.1.505-1.el7 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-debuginfo | 0:2.1.505-1.el7 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-host | 0:2.1.9-1.el7 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-runtime-2.1 | 0:2.1.9-1.el7 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-sdk-2.1 | 0:2.1.505-1.el7 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-sdk-2.1.5xx | 0:2.1.505-1.el7 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-runtime | 0:2.1-8.el7 |
| Red Hat rhel dotnet 2.2 | rh-dotnet22 | 0:2.2-4.el7 |
| Red Hat rhel dotnet 2.2 | rh-dotnet22-dotnet | 0:2.2.105-1.el7 |
| Red Hat rhel dotnet 2.2 | rh-dotnet22-dotnet-debuginfo | 0:2.2.105-1.el7 |
| Red Hat rhel dotnet 2.2 | rh-dotnet22-dotnet-host | 0:2.2.3-1.el7 |
| Red Hat rhel dotnet 2.2 | rh-dotnet22-dotnet-host-fxr-2.2 | 0:2.2.3-1.el7 |
| Red Hat rhel dotnet 2.2 | rh-dotnet22-dotnet-runtime-2.2 | 0:2.2.3-1.el7 |
| Red Hat rhel dotnet 2.2 | rh-dotnet22-dotnet-sdk-2.2 | 0:2.2.105-1.el7 |
| Red Hat rhel dotnet 2.2 | rh-dotnet22-dotnet-sdk-2.2.1xx | 0:2.2.105-1.el7 |
| Red Hat rhel dotnet 2.2 | rh-dotnet22-runtime | 0:2.2-4.el7 |