Threat database

.NET 6.0 versions prior to SDK 6.0.132 and Runtime 6.0.32 contain a vulnerability that allows denial of service (DoS) when parsing X.509 content and Object Identifiers. This issue is tracked as CVE-2024-38095. Red Hat and SUSE have released security updates addressing this vulnerability in their respective .NET 6.0 packages for Red Hat Enterprise Linux 8 and related distributions. The vulnerability is rated as moderate severity by Red Hat Product Security. No CVSS score is provided in the advisory. The fix is available and should be applied to mitigate the issue.