CVE-2021-1721
Fixed in a distro release EPSS 3%CVSS 6.5
.NET Core and Visual Studio Denial of Service Vulnerability
Products: Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6), Microsoft PowerShell Core 7.1, Microsoft PowerShell Core 7.0, Microsoft .NET Core 2.1, Microsoft .NET Core 3.1, Microsoft .NET 5.0, Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3), Microsoft Visual Studio 2019 version 16.8, Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| NuGet | Microsoft.NETCore.App | 2.1.25 |
| NuGet | Microsoft.NETCore.App.Host.linux-arm | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Host.linux-arm64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Host.linux-musl-arm64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Host.linux-musl-x64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Host.linux-x64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Host.osx-x64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Host.rhel.6-x64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Host.win-arm | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Host.win-arm64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Host.win-x64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Host.win-x86 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-arm | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-arm64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-x64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.Mono.osx-x64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.android-arm | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.android-arm64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.android-x64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.android-x86 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.browser-wasm | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.ios-arm | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.ios-x64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.ios-x86 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.linux-arm | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.linux-arm | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Runtime.linux-arm64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.linux-arm64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Runtime.linux-musl-arm | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.linux-musl-arm64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.linux-musl-arm64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Runtime.linux-musl-x64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.linux-musl-x64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Runtime.linux-x64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Runtime.linux-x64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.osx-x64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Runtime.osx-x64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.rhel.6-x64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Runtime.tvos-arm64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.tvos-x64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.win-arm | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Runtime.win-arm | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.win-arm64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Runtime.win-arm64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.win-x64 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Runtime.win-x64 | 5.0.3 |
| NuGet | Microsoft.NETCore.App.Runtime.win-x86 | 3.1.12 |
| NuGet | Microsoft.NETCore.App.Runtime.win-x86 | 5.0.3 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | dotnet-runtime | 5.0.3.sdk103-2 |
| Arch Linux | dotnet-sdk | 5.0.3.sdk103-2 |
| Red Hat Enterprise Linux 8 | aspnetcore-runtime-3.1 | 0:3.1.12-1.el8_3 |
| Red Hat Enterprise Linux 8 | aspnetcore-runtime-5.0 | 0:5.0.3-1.el8_3 |
| Red Hat Enterprise Linux 8 | aspnetcore-targeting-pack-3.1 | 0:3.1.12-1.el8_3 |
| Red Hat Enterprise Linux 8 | aspnetcore-targeting-pack-5.0 | 0:5.0.3-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet | 0:5.0.103-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet | 0:2.1.521-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-3.1 | 0:3.1.12-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-3.1-debuginfo | 0:3.1.12-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-5.0 | 0:5.0.3-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-5.0-debuginfo | 0:5.0.3-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-debuginfo | 0:2.1.521-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-debugsource | 0:2.1.521-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-host | 0:5.0.3-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-host-debuginfo | 0:5.0.3-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-host-fxr-2.1 | 0:2.1.25-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-host-fxr-2.1-debuginfo | 0:2.1.25-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-3.1 | 0:3.1.12-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-3.1-debuginfo | 0:3.1.12-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-5.0 | 0:5.0.3-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-5.0-debuginfo | 0:5.0.3-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-2.1 | 0:2.1.25-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-2.1-debuginfo | 0:2.1.25-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-3.1 | 0:3.1.12-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-3.1-debuginfo | 0:3.1.12-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-5.0 | 0:5.0.3-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-5.0-debuginfo | 0:5.0.3-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-2.1 | 0:2.1.521-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-2.1.5xx | 0:2.1.521-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-2.1.5xx-debuginfo | 0:2.1.521-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-3.1 | 0:3.1.112-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-3.1-debuginfo | 0:3.1.112-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-5.0 | 0:5.0.103-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-5.0-debuginfo | 0:5.0.103-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-targeting-pack-3.1 | 0:3.1.12-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-targeting-pack-5.0 | 0:5.0.3-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-templates-3.1 | 0:3.1.112-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet-templates-5.0 | 0:5.0.103-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet3.1 | 0:3.1.112-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet3.1-debuginfo | 0:3.1.112-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet3.1-debugsource | 0:3.1.112-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet5.0 | 0:5.0.103-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet5.0-debuginfo | 0:5.0.103-1.el8_3 |
| Red Hat Enterprise Linux 8 | dotnet5.0-debugsource | 0:5.0.103-1.el8_3 |
| Red Hat Enterprise Linux 8 | netstandard-targeting-pack-2.1 | 0:5.0.103-1.el8_3 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21 | 0:2.1-24.el7_9 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet | 0:2.1.521-1.el7_9 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-debuginfo | 0:2.1.521-1.el7_9 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-host | 0:2.1.25-1.el7_9 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-runtime-2.1 | 0:2.1.25-1.el7_9 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-sdk-2.1 | 0:2.1.521-1.el7_9 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-dotnet-sdk-2.1.5xx | 0:2.1.521-1.el7_9 |
| Red Hat rhel dotnet 2.1 | rh-dotnet21-runtime | 0:2.1-24.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-aspnetcore-runtime-3.1 | 0:3.1.12-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-aspnetcore-targeting-pack-3.1 | 0:3.1.12-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet | 0:3.1.112-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-apphost-pack-3.1 | 0:3.1.12-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-debuginfo | 0:3.1.112-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-host | 0:3.1.12-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-hostfxr-3.1 | 0:3.1.12-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-runtime-3.1 | 0:3.1.12-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-sdk-3.1 | 0:3.1.112-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-targeting-pack-3.1 | 0:3.1.12-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-dotnet-templates-3.1 | 0:3.1.112-1.el7_9 |
| Red Hat rhel dotnet 3.1 | rh-dotnet31-netstandard-targeting-pack-2.1 | 0:3.1.112-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-aspnetcore-runtime-5.0 | 0:5.0.3-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-aspnetcore-targeting-pack-5.0 | 0:5.0.3-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet | 0:5.0.103-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-apphost-pack-5.0 | 0:5.0.3-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-debuginfo | 0:5.0.103-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-host | 0:5.0.3-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-hostfxr-5.0 | 0:5.0.3-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-runtime-5.0 | 0:5.0.3-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-sdk-5.0 | 0:5.0.103-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-targeting-pack-5.0 | 0:5.0.3-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-dotnet-templates-5.0 | 0:5.0.103-1.el7_9 |
| Red Hat rhel dotnet 5.0 | rh-dotnet50-netstandard-targeting-pack-2.1 | 0:5.0.103-1.el7_9 |