Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-07-14T21:37:42 dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-770

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM

Red Hat Hardened Images 2026-06-17T00:00:00Z RHSA-2026:26638 dotnet10-0-main-10.0.109-1.hum1 Red Hat Hardened Images 2026-06-19T00:00:00Z RHSA-2026:27171 dotnet9-0-main-9.0.118-1.hum1 Red Hat Hardened Images 2026-07-20T00:00:00Z RHSA-2026:42145 dotnet8-0-main-8.0.129-2.1.hum1 Red Hat Enterprise Linux 10 Affected dotnet10.0 Red Hat Enterprise Linux 10 Affected dotnet8.0 Red Hat Enterprise Linux 10 Affected dotnet9.0 Red Hat Enterprise Linux 8 Affected dotnet10.0 Red Hat Enterprise Linux 8 Affected dotnet8.0 Red Hat Enterprise Linux 8 Affected dotnet9.0 Red Hat Enterprise Linux 9 Affected dotnet10.0 Red Hat Enterprise Linux 9 Affected dotnet8.0 Red Hat Enterprise Linux 9 Affected dotnet9.0 Red Hat Hardened Images Not affected hi/dotnet-runtime Red Hat Hardened Images Not affected hi/dotnet-sdk https://www.cve.org/CVERecord?id=CVE-2026-50651 https://nvd.nist.gov/vuln/detail/CVE-2026-50651