Bug 2500580 (CVE-2026-50525)

Summary: CVE-2026-50525 dotnet: .NET: Denial of Service due to uncontrolled resource allocation
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedCC: rhel-process-autobot, sdawley, watson-tool-maintainers
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service (DoS). An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash. This can disrupt the availability of services running on the .NET framework.
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2501462, 2501463, 2501770    
Bug Blocks:    

Description OSIDB Bzimport 2026-07-14 20:04:25 UTC
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Comment 4 errata-xmlrpc 2026-07-20 04:05:19 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:41899 https://access.redhat.com/errata/RHSA-2026:41899

Comment 5 errata-xmlrpc 2026-07-20 04:09:35 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:41893 https://access.redhat.com/errata/RHSA-2026:41893

Comment 6 errata-xmlrpc 2026-07-20 04:38:20 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:41900 https://access.redhat.com/errata/RHSA-2026:41900

Comment 7 errata-xmlrpc 2026-07-20 04:46:13 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:41901 https://access.redhat.com/errata/RHSA-2026:41901

Comment 8 errata-xmlrpc 2026-07-20 04:57:57 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:41894 https://access.redhat.com/errata/RHSA-2026:41894

Comment 9 errata-xmlrpc 2026-07-20 06:20:32 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:41896 https://access.redhat.com/errata/RHSA-2026:41896

Comment 10 errata-xmlrpc 2026-07-20 06:24:33 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:41898 https://access.redhat.com/errata/RHSA-2026:41898

Comment 11 errata-xmlrpc 2026-08-24 02:52:22 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:58566 https://access.redhat.com/errata/RHSA-2026:58566

Comment 12 errata-xmlrpc 2026-08-24 02:53:55 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:58567 https://access.redhat.com/errata/RHSA-2026:58567

Comment 13 errata-xmlrpc 2026-08-24 04:22:50 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:58568 https://access.redhat.com/errata/RHSA-2026:58568

Comment 14 errata-xmlrpc 2026-08-24 05:42:08 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:58569 https://access.redhat.com/errata/RHSA-2026:58569

Comment 15 errata-xmlrpc 2026-08-24 05:48:26 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:58570 https://access.redhat.com/errata/RHSA-2026:58570