Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-10-13T17:00:00 dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-776

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

This vulnerability is rated as an Important impact for Red Hat products because an unauthenticated remote attacker can cause a denial of service via resource exhaustion without requiring elevated privileges or user interaction. In Red Hat environments, exposure is limited to .NET applications and services that parse untrusted XML signatures using the SignedXml implementation. Applications that do not accept untrusted XML documents or do not perform digital signature verification on untrusted data are not susceptible to this flaw. Red Hat Enterprise Linux 10 2026-10-20T00:00:00Z RHSA-2026:86168 dotnet8.0-0:8.0.132-1.el10_2 Red Hat Enterprise Linux 10 2026-10-20T00:00:00Z RHSA-2026:86172 dotnet9.0-0:9.0.122-1.el10_2 Red Hat Enterprise Linux 10 2026-10-20T00:00:00Z RHSA-2026:86195 dotnet10.0-0:10.0.113-1.el10_2 Red Hat Enterprise Linux 10.0 Extended Update Support 2026-10-22T00:00:00Z RHSA-2026:88424 dotnet9.0-0:9.0.122-1.el10_0 Red Hat Enterprise Linux 10.0 Extended Update Support 2026-10-22T00:00:00Z RHSA-2026:88474 dotnet8.0-0:8.0.132-1.el10_0 Red Hat Enterprise Linux 8 2026-10-20T00:00:00Z RHSA-2026:86170 dotnet9.0-0:9.0.122-1.el8_10 Red Hat Enterprise Linux 8 2026-10-20T00:00:00Z RHSA-2026:86192 dotnet10.0-0:10.0.113-1.el8_10 Red Hat Enterprise Linux 8 2026-10-21T00:00:00Z RHSA-2026:86594 dotnet8.0-0:8.0.132-2.el8_10 Red Hat Enterprise Linux 9 2026-10-20T00:00:00Z RHSA-2026:86169 dotnet8.0-0:8.0.132-1.el9_8 Red Hat Enterprise Linux 9 2026-10-20T00:00:00Z RHSA-2026:86171 dotnet9.0-0:9.0.122-1.el9_8 Red Hat Enterprise Linux 9 2026-10-20T00:00:00Z RHSA-2026:86193 dotnet10.0-0:10.0.113-1.el9_8 Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 2026-10-22T00:00:00Z RHSA-2026:88425 dotnet8.0-0:8.0.132-1.el9_4 Red Hat Enterprise Linux 9.6 Extended Update Support 2026-10-22T00:00:00Z RHSA-2026:88422 dotnet8.0-0:8.0.132-1.el9_6 Red Hat Enterprise Linux 9.6 Extended Update Support 2026-10-27T00:00:00Z RHSA-2026:89735 dotnet9.0-0:9.0.122-1.el9_6 Red Hat Hardened Images 2026-10-17T00:00:00Z RHSA-2026:84424 dotnet9-0-main-9.0.122-0.1.hum1 Red Hat Hardened Images 2026-10-17T00:00:00Z RHSA-2026:84424 dotnet9-0-main-9.0.21-0.1.hum1 Red Hat Hardened Images 2026-10-18T00:00:00Z RHSA-2026:84491 dotnet10-0-main-10.0.113-1.hum1 Red Hat Hardened Images 2026-10-19T00:00:00Z RHSA-2026:84693 dotnet8-0-main-8.0.132-0.1.hum1 https://www.cve.org/CVERecord?id=CVE-2026-69651 https://nvd.nist.gov/vuln/detail/CVE-2026-69651