REDHAT-BUG-2212617: High severity .net vulnerability
.NET Kestrel: Denial of Service processing X509 Certificates
When a .NET application is internet-facing and accepts an X509 client certificate for mutual TLS, a malicious client certificate can cause unbounded CPU usage.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2212617?
The severity of REDHAT-BUG-2212617 is high due to the potential for a Denial of Service attack causing unbounded CPU usage.
How do I fix REDHAT-BUG-2212617?
To fix REDHAT-BUG-2212617, ensure to update to the latest version of .NET Kestrel incorporating the security patches addressing this vulnerability.
What systems are affected by REDHAT-BUG-2212617?
REDHAT-BUG-2212617 affects .NET Kestrel applications that are internet-facing and utilize X509 client certificates for mutual TLS.
What types of attacks can occur due to REDHAT-BUG-2212617?
REDHAT-BUG-2212617 can be exploited to execute denial of service attacks, leading to excessive CPU consumption.
Is there a workaround for REDHAT-BUG-2212617?
A workaround for REDHAT-BUG-2212617 includes implementing stringent validation of client certificates before they are processed.