Share via

Microsoft .NET Core installation

Rising Flight 6,456 Reputation points
2021-09-01T17:31:03.64+00:00

Hi All

i have the below vulnerability on my servers. if i download the .NET 5.0 runtime from the website https://dotnet.microsoft.com/download will this fix it. please guide me.

The Microsoft .NET Core installation on the remote host is version 2.1.x prior to 2.1.26, 3.1.x prior to 3.1.13, or 5.x prior to 5.0.4. It is, therefore, affected by a remote code execution vulnerability.
An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands.

Developer technologies | .NET | .NET Runtime
Developer technologies | .NET | Other
0 comments No comments

Answer accepted by question author

Limitless Technology 40,106 Reputation points
2021-09-02T09:13:06.857+00:00

Hello RisingFlight,

Been there, and I found the next MS article to contain all I needed to patch my servers.

https://devblogs.microsoft.com/dotnet/net-march-2021/

Hope it helps you too!

Was this answer helpful?

0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Lex Li 6,042 Reputation points
    2021-09-01T19:12:19.093+00:00

    No, it won't. .NET 5 runtime installer only updates .NET 5 itself, not other older versions.

    But if you utilize Microsoft Update per Microsoft, then you get all runtime versions up-to-date.

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.