UBUNTU-CVE-2026-120796: Medium severity ubuntu/dotnet7 vulnerability
Published Nov 10, 2026
·Updated
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Affected Software
2 affected componentsFixes available
ubuntu/dotnet7*
ubuntu/dotnet11<11.0.100-11.0.0-0ubuntu1~26.10.1
11.0.100-11.0.0-0ubuntu1~26.10.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/dotnet11to a version that resolves this vulnerability.Fixed in 11.0.100-11.0.0-0ubuntu1~26.10.1
Event History
Nov 10, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
No authentication, privileges, or user interaction are required. The issue can be exploited remotely over a network.
2
What is the likely impact of a successful exploit?
The documented impact is denial of service through inefficient algorithmic complexity. Confidentiality and integrity impact are listed as none, while availability impact is low.
3
Which Ubuntu software packages are identified as affected?
The affected software listed is ubuntu/dotnet7 and ubuntu/dotnet11.