{"schemaVersion":3,"id":"USN-7822-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"dotnet8, dotnet9, dotnet10 vulnerabilities\n\nIt was discovered that .NET did not properly handle the creation of temporary\nbuild time directories. An attacker could possibly use this issue to cause a\ndenial of service. (CVE-2025-55247)\n\nIt was discovered that .NET did not properly establish TLS sessions for\nSMTP server connections. An attacker could use this issue to cause .NET\nto use unencrypted connections. This issue only affects .NET versions 8.0\nand 9.0. (CVE-2025-55248)\n\nIt was discovered that .NET inconsistently interpreted certain http\nrequests. An attacker could possibly use this to bypass a security feature\nover a network. (CVE-2025-55315)","dates":{"published":"2025-10-16T15:11:14.000Z","modified":"2026-04-27T18:22:49.148Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"dotnet10","name":"dotnet10","label":"dotnet10","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet10","purlType":"deb","versions":[{"text":"< 10.0.100-10.0.0~rc2-0ubuntu1~25.10.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.100-10.0.0~rc2-0ubuntu1~25.10.2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet8","name":"dotnet8","label":"dotnet8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet8","purlType":"deb","versions":[{"text":"< 8.0.121-8.0.21-0ubuntu1~22.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 8.0.121-8.0.21-0ubuntu1~24.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 8.0.121-8.0.21-0ubuntu1~25.10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.121-8.0.21-0ubuntu1~22.04.1 | < 8.0.121-8.0.21-0ubuntu1~24.04.1 | < 8.0.121-8.0.21-0ubuntu1~25.10.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet9","name":"dotnet9","label":"dotnet9","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet9","purlType":"deb","versions":[{"text":"< 9.0.111-9.0.10-0ubuntu1~25.10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.111-9.0.10-0ubuntu1~25.10.1","eol":null,"hubHref":null}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7822-1","label":"ubuntu.com/security/notices/USN-7822-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-55247","label":"ubuntu.com/security/CVE-2025-55247","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-55248","label":"ubuntu.com/security/CVE-2025-55248","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-55315","label":"ubuntu.com/security/CVE-2025-55315","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"],"downstream":[],"duplicates":[],"related":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},"timeline":[{"kind":"published","date":"2025-10-16T15:11:14.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-27T18:22:49.148Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T12:20:02.373Z","stale":false,"partial":false}}