REDHAT-BUG-2403083: High severity .NET .NET vulnerability
Published Oct 10, 2025
·Updated
MITM (man in the middle) attacker may prevent use of TLS between client and SMTP server, forcing client to send data over unencrypted connection.
Affected versions: .NET 8.0 (that's the RHEL dotnet8.0 package) .NET 9.0 (that's the RHEL dotnet9.0 package)
Affected Software
1 affected component
.NET .NET>=8.0<=9.0
Event History
Oct 10, 2025
Data Sourced
via Red Hat·01:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2403083?
The severity of REDHAT-BUG-2403083 is critical due to potential man-in-the-middle vulnerabilities.
2
How do I fix REDHAT-BUG-2403083?
To fix REDHAT-BUG-2403083, update .NET to the latest patched versions to ensure TLS is enforced.
3
What versions are affected by REDHAT-BUG-2403083?
Affected versions by REDHAT-BUG-2403083 include .NET 8.0 and .NET 9.0 packages.
4
What does REDHAT-BUG-2403083 vulnerability allow an attacker to do?
REDHAT-BUG-2403083 allows an attacker to intercept data by downgrading the connection to an unencrypted state.
5
Is the attack in REDHAT-BUG-2403083 remote or local?
The attack in REDHAT-BUG-2403083 is a remote attack that could occur over the network.