ALPINE-CVE-2026-109475: Buffer Overflow
Published Nov 10, 2026
·Updated
Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.
Affected Software
1 affected componentFixes available
alpine/dotnet9-runtime<9.0.23-r0
9.0.23-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/dotnet9-runtimeto a version that resolves this vulnerability.Fixed in 9.0.23-r0
Event History
Nov 10, 2026
CVE Published
via OSV·07:18 PM
Data Sourced
via OSV·07:18 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The issue is network-reachable and requires no privileges or user interaction. An unauthorized attacker can exploit it remotely.
2
What is the expected impact if exploitation succeeds?
Successful exploitation can cause a denial of service. The provided severity vector indicates no direct confidentiality or integrity impact.
3
Which deployed software should be prioritized for review?
Systems using the alpine/dotnet9-runtime package should be reviewed, particularly where the runtime is reachable through network-exposed applications or services.