Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
RHSA-2017:3248
See a problem?
Please try reporting it
to the source
first.
Source
https://access.redhat.com/errata/RHSA-2017:3248
Import Source
https://security.access.redhat.com/data/osv/RHSA-2017:3248.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2017:3248
Upstream
CVE-2017-11770
CVE-2017-8585
Published
2024-09-13T16:49:35Z
Modified
2026-06-29T10:18:20Z
Severity
5.9 (Medium)
CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Calculator
Summary
Red Hat Security Advisory: .NET Core security update
Details
References
https://access.redhat.com/errata/RHSA-2017:3248
https://access.redhat.com/security/updates/classification/#low
https://github.com/dotnet/announcements/issues/34
https://github.com/dotnet/announcements/issues/44
https://github.com/dotnet/core/blob/master/release-notes/2.0/2.0.3.md
https://github.com/dotnet/core/blob/master/release-notes/1.1/1.1.5.md
https://github.com/dotnet/core/blob/master/release-notes/1.0/1.0.8.md
https://bugzilla.redhat.com/show_bug.cgi?id=1512982
https://bugzilla.redhat.com/show_bug.cgi?id=1512992
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3248.json
https://access.redhat.com/security/cve/CVE-2017-8585
https://www.cve.org/CVERecord?id=CVE-2017-8585
https://nvd.nist.gov/vuln/detail/CVE-2017-8585
https://www.sidertia.com/Home/Community/Blog/2017/07/14/Microsoft-fixes-the-CVE-2017-8585-security-vulnerability-discovered-by-Sidertia-Team
https://access.redhat.com/security/cve/CVE-2017-11770
https://www.cve.org/CVERecord?id=CVE-2017-11770
https://nvd.nist.gov/vuln/detail/CVE-2017-11770
Affected packages
Red Hat:rhel_dotnet:1.0::el7
rh-dotnetcore10-dotnetcore
Package
Name
rh-dotnetcore10-dotnetcore
Purl
pkg:rpm/redhat/rh-dotnetcore10-dotnetcore
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.0.8-1.el7
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2017:3248.json"
rh-dotnetcore10-dotnetcore-debuginfo
Package
Name
rh-dotnetcore10-dotnetcore-debuginfo
Purl
pkg:rpm/redhat/rh-dotnetcore10-dotnetcore-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.0.8-1.el7
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2017:3248.json"
Red Hat:rhel_dotnet:1.1::el7
rh-dotnetcore11-dotnetcore
Package
Name
rh-dotnetcore11-dotnetcore
Purl
pkg:rpm/redhat/rh-dotnetcore11-dotnetcore
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.1.5-1.el7
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2017:3248.json"
rh-dotnetcore11-dotnetcore-debuginfo
Package
Name
rh-dotnetcore11-dotnetcore-debuginfo
Purl
pkg:rpm/redhat/rh-dotnetcore11-dotnetcore-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.1.5-1.el7
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2017:3248.json"
Red Hat:rhel_dotnet:2.0::el7
rh-dotnet20-dotnet
Package
Name
rh-dotnet20-dotnet
Purl
pkg:rpm/redhat/rh-dotnet20-dotnet
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.0.3-4.el7
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2017:3248.json"
rh-dotnet20-dotnet-debuginfo
Package
Name
rh-dotnet20-dotnet-debuginfo
Purl
pkg:rpm/redhat/rh-dotnet20-dotnet-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.0.3-4.el7
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2017:3248.json"
rh-dotnet20-dotnet-host
Package
Name
rh-dotnet20-dotnet-host
Purl
pkg:rpm/redhat/rh-dotnet20-dotnet-host
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.0.3-4.el7
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2017:3248.json"
rh-dotnet20-dotnet-runtime-2.0
Package
Name
rh-dotnet20-dotnet-runtime-2.0
Purl
pkg:rpm/redhat/rh-dotnet20-dotnet-runtime-2.0
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.0.3-4.el7
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2017:3248.json"
rh-dotnet20-dotnet-sdk-2.0
Package
Name
rh-dotnet20-dotnet-sdk-2.0
Purl
pkg:rpm/redhat/rh-dotnet20-dotnet-sdk-2.0
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.0.3-4.el7
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2017:3248.json"
RHSA-2017:3248 - OSV