ALPINE-CVE-2026-109478: High severity alpine/dotnet8-runtime vulnerability
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/dotnet8-runtimeto a version that resolves this vulnerability.Fixed in 8.0.34-r0
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems using the alpine/dotnet8-runtime package are affected by the listed vulnerability. The issue can be reached over a network, so exposed ASP.NET Core services are the relevant attack surface.
What does an attacker need to exploit it?
The vulnerability has network attack vector, low attack complexity, and requires no privileges or user interaction. An unauthorized remote attacker can exploit the inefficient algorithmic complexity to cause a denial of service.
What is the expected impact?
The reported impact is high availability impact: an attacker may deny service. No confidentiality or integrity impact is listed.