Bug 2500580 (CVE-2026-50525)

Summary: CVE-2026-50525 dotnet: .NET: Denial of Service due to uncontrolled resource allocation
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedCC: rhel-process-autobot, sdawley, watson-tool-maintainers
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service (DoS). An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash. This can disrupt the availability of services running on the .NET framework.
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2501462, 2501463, 2501770    
Bug Blocks:    

Description OSIDB Bzimport 2026-07-14 20:04:25 UTC
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Comment 4 errata-xmlrpc 2026-07-20 04:05:19 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:41899 https://access.redhat.com/errata/RHSA-2026:41899

Comment 5 errata-xmlrpc 2026-07-20 04:09:35 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:41893 https://access.redhat.com/errata/RHSA-2026:41893

Comment 6 errata-xmlrpc 2026-07-20 04:38:20 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:41900 https://access.redhat.com/errata/RHSA-2026:41900

Comment 7 errata-xmlrpc 2026-07-20 04:46:13 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:41901 https://access.redhat.com/errata/RHSA-2026:41901

Comment 8 errata-xmlrpc 2026-07-20 04:57:57 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:41894 https://access.redhat.com/errata/RHSA-2026:41894

Comment 9 errata-xmlrpc 2026-07-20 06:20:32 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:41896 https://access.redhat.com/errata/RHSA-2026:41896

Comment 10 errata-xmlrpc 2026-07-20 06:24:33 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:41898 https://access.redhat.com/errata/RHSA-2026:41898