REDHAT-BUG-1673891: Medium severity microsoft .net core vulnerability

Published Feb 8, 2019
·
Updated

It was found that the IdnHost property of System.Uri in .NET core insufficiently validates input. Certain Unicode characters can incorrectly change the meaning of the URI when IDN encoding is applied.

Affected Software

1 affected component
.NET Core

Event History

Feb 8, 2019
Data Sourced
via Red Hat·11:47 AM
DescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of REDHAT-BUG-1673891?

The severity of REDHAT-BUG-1673891 is classified as high due to potential security implications related to URI validation.

2

How do I fix REDHAT-BUG-1673891?

To fix REDHAT-BUG-1673891, ensure that you update to the latest version of .NET Core that addresses this URI validation issue.

3

What is affected by REDHAT-BUG-1673891?

REDHAT-BUG-1673891 specifically affects the IdnHost property of System.Uri in .NET Core.

4

What are the potential risks associated with REDHAT-BUG-1673891?

The potential risks associated with REDHAT-BUG-1673891 include unexpected behavior and vulnerabilities due to improper URI interpretation caused by certain Unicode characters.

5

Is REDHAT-BUG-1673891 specific to certain .NET Core versions?

Yes, REDHAT-BUG-1673891 can affect various .NET Core versions where the IdnHost property does not validate input properly.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203