REDHAT-BUG-1552060: Low severity microsoft .net core runtime vulnerability
Case insensitive string comparison uses an insecure hashing algorithm which can be compromised in .NET Core 1.x (Unix) and .NET Core 2.0. The attack vector could be a Dictionary which uses case invariant keys.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1552060?
The severity of REDHAT-BUG-1552060 is considered critical due to the potential for exploitation in case insensitive string comparisons.
How do I fix REDHAT-BUG-1552060?
To fix REDHAT-BUG-1552060, upgrade to .NET Core version 2.1 or later, which addresses the insecure hashing algorithm.
Which versions of .NET Core are affected by REDHAT-BUG-1552060?
REDHAT-BUG-1552060 affects .NET Core versions 1.x and 2.0.
What are the potential risks of not addressing REDHAT-BUG-1552060?
Not addressing REDHAT-BUG-1552060 could lead to vulnerabilities that allow attackers to compromise applications using insecure hashing for case invariant dictionary keys.
Is REDHAT-BUG-1552060 specific to Unix systems?
Yes, REDHAT-BUG-1552060 specifically affects .NET Core running on Unix systems.