Red Hat Bug Fix Advisory: .NET 6.0 bug fix and enhancement update
Affects Red HatSource GCVE Database
Not known to be exploited.
Data as of 5 Nov 2026, 16:35 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
Exploitation evidence
Disclosed: evidence found.
CVE published 13 Nov 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.
Description
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. Bug Fix(es): * Update .NET 6.0 to SDK 6.0.135 and Runtime 6.0.35 [rhel-9.5.z] (JIRA:RHEL-60799)Bug Fix(es) and Enhancement(s): * Update .NET 6.0 to SDK 6.0.135 and Runtime 6.0.35 [rhel-9.5.z] (JIRA:RHEL-60799) * dotnet6.0: Multiple .NET components susceptible to hash flooding [rhel-9.5] (JIRA:RHEL-60992) * dotnet6.0: Denial of Service in System.Text.Json [rhel-9.5] (JIRA:RHEL-61010) * dotnet6.0: System.IO.Packaging - Multiple DoS vectors in use of SortedList [rhel-9.5] (JIRA:RHEL-61014) * dotnet6.0: nodejs-ws: denial of service when handling a request with many HTTP headers [rhel-9] (JIRA:RHEL-43154)