UBUNTU-CVE-2026-118748: High severity ubuntu/dotnet7 vulnerability
Published Nov 10, 2026
·Updated
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Affected Software
2 affected componentsFixes available
ubuntu/dotnet7*
ubuntu/dotnet11<11.0.100-11.0.0-0ubuntu1~26.10.1
11.0.100-11.0.0-0ubuntu1~26.10.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/dotnet11to a version that resolves this vulnerability.Fixed in 11.0.100-11.0.0-0ubuntu1~26.10.1
Event History
Nov 10, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which Ubuntu software packages should be prioritized for assessment?
The affected software listed is ubuntu/dotnet7 and ubuntu/dotnet11. The provided data does not identify affected or fixed package versions.