Known vulnerabilities in dotnet-hostfxr-9.0 (Ubuntu package)

Known vulnerabilities in dotnet-hostfxr-9.0 (Ubuntu package)

Vendor: Canonical Ltd.

Software: dotnet-hostfxr-9.0 (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:dotnet-hostfxr-9.0_ubuntu_package:*:*:*:*:*:ubuntu:*:*

Website: https://www.ubuntu.com/

Total vulnerabilities: 9

Public exploits: 0

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU109148 - External Control of File Name or Path CVE-2025-26646	CWE-73	Medium	No	No	9.0.5-0ubuntu1~24.10.1, 9.0.5-0ubuntu1~25.04.1	13.05.2025	SB20250513127 SB2025051438 SB2025051446 and 4 more
#VU107240 - Allocation of Resources Without Limits or Throttling CVE-2025-26682	CWE-770	High	No	No	9.0.4-0ubuntu1~24.10.1	08.04.2025	SB2025040897 SB20250408104
#VU105568 - Improper Authentication CVE-2025-24070	CWE-287	High	No	No	9.0.3-0ubuntu1~24.10.1	11.03.2025	SB20250311101 SB2025031215 SB2025031778 and 4 more
#VU102804 - Integer overflow CVE-2025-21172	CWE-190	Medium	No	No	9.0.1-0ubuntu1~24.10.1	15.01.2025	SB2025011548 SB2025011647 SB2025011671 and 6 more
#VU102801 - Heap-based Buffer Overflow CVE-2025-21171	CWE-122	Medium	No	No	9.0.1-0ubuntu1~24.10.1	15.01.2025	SB2025011545 SB2025011647 SB2025011672 and 2 more
#VU102800 - Creation of Temporary File in Directory with Insecure Permissions CVE-2025-21173	CWE-379	Low	No	No	9.0.1-0ubuntu1~24.10.1	15.01.2025	SB2025011545 SB2025011647 SB2025011671 and 6 more
#VU102784 - Out-of-bounds read CVE-2025-21176	CWE-125	High	No	No	9.0.1-0ubuntu1~24.10.1	15.01.2025	SB2025011536 SB2025011647 SB2025011671 and 6 more
#VU100397 - Unchecked Input for Loop Condition CVE-2024-43499	CWE-606	Medium	No	No	9.0.0-rtm-0ubuntu1~24.10.1	12.11.2024	SB20241112149 SB2024111302 SB2024111344 and 2 more
#VU100396 - Type confusion CVE-2024-43498	CWE-843	High	No	No	9.0.0-rtm-0ubuntu1~24.10.1	12.11.2024	SB20241112149 SB2024111302 SB2024111344 and 2 more