Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.NetCore.App.Runtime.linux-arm | nuget | >= 10.0.0, <= 10.0.9 | 10.0.10 |
| Microsoft.NetCore.App.Runtime.linux-arm64 | nuget | >= 10.0.0, <= 10.0.9 | 10.0.10 |
| Microsoft.NetCore.App.Runtime.linux-musl-arm | nuget | >= 10.0.0, <= 10.0.9 | 10.0.10 |
| Microsoft.NetCore.App.Runtime.linux-musl-arm64 | nuget | >= 10.0.0, <= 10.0.9 | 10.0.10 |
| Microsoft.NetCore.App.Runtime.linux-musl-x64 | nuget | >= 10.0.0, <= 10.0.9 | 10.0.10 |
| Microsoft.NetCore.App.Runtime.linux-x64 | nuget | >= 10.0.0, <= 10.0.9 | 10.0.10 |
| Microsoft.NetCore.App.Runtime.osx-arm64 | nuget | >= 10.0.0, <= 10.0.9 | 10.0.10 |
| Microsoft.NetCore.App.Runtime.osx-x64 | nuget | >= 10.0.0, <= 10.0.9 | 10.0.10 |
| Microsoft.NetCore.App.Runtime.linux-arm | nuget | >= 9.0.0, <= 9.0.17 | 9.0.18 |
| Microsoft.NetCore.App.Runtime.linux-arm64 | nuget | >= 9.0.0, <= 9.0.17 | 9.0.18 |
| Microsoft.NetCore.App.Runtime.linux-musl-arm | nuget | >= 9.0.0, <= 9.0.17 | 9.0.18 |
| Microsoft.NetCore.App.Runtime.linux-musl-arm64 | nuget | >= 9.0.0, <= 9.0.17 | 9.0.18 |
| Microsoft.NetCore.App.Runtime.linux-musl-x64 | nuget | >= 9.0.0, <= 9.0.17 | 9.0.18 |
| Microsoft.NetCore.App.Runtime.linux-x64 | nuget | >= 9.0.0, <= 9.0.17 | 9.0.18 |
| Microsoft.NetCore.App.Runtime.osx-arm64 | nuget | >= 9.0.0, <= 9.0.17 | 9.0.18 |
| Microsoft.NetCore.App.Runtime.osx-x64 | nuget | >= 9.0.0, <= 9.0.17 | 9.0.18 |
| Microsoft.NetCore.App.Runtime.linux-arm | nuget | >= 8.0.0, <= 8.0.28 | 8.0.29 |
| Microsoft.NetCore.App.Runtime.linux-arm64 | nuget | >= 8.0.0, <= 8.0.28 | 8.0.29 |
| Microsoft.NetCore.App.Runtime.linux-musl-arm | nuget | >= 8.0.0, <= 8.0.28 | 8.0.29 |
| Microsoft.NetCore.App.Runtime.linux-musl-arm64 | nuget | >= 8.0.0, <= 8.0.28 | 8.0.29 |
| Microsoft.NetCore.App.Runtime.linux-musl-x64 | nuget | >= 8.0.0, <= 8.0.28 | 8.0.29 |
| Microsoft.NetCore.App.Runtime.linux-x64 | nuget | >= 8.0.0, <= 8.0.28 | 8.0.29 |
| Microsoft.NetCore.App.Runtime.osx-arm64 | nuget | >= 8.0.0, <= 8.0.28 | 8.0.29 |
| Microsoft.NetCore.App.Runtime.osx-x64 | nuget | >= 8.0.0, <= 8.0.28 | 8.0.29 |
Miggo AIRoot Cause AnalysisThe vulnerability is a type confusion in the native .NET cryptography layer when parsing X.509 certificates, specifically within the CryptoNative_GetX509NameInfo function located in openssl.c. The advisory mentions this function directly. Analysis of the commits between the vulnerable and patched versions of the .NET runtime revealed a patch that directly addresses this issue. The commit b3c7ed4e1b1ed24b88d8be6118d5c4fa6bd536fc contains the fix. The patch modifies CryptoNative_GetX509NameInfo to add a crucial type check before accessing a potentially malicious field in a malformed certificate, thus preventing a crash. The managed code that calls this native function, System.Security.Cryptography.X509Certificates.CertificateData.GetNameInfo, was also updated to handle exceptions gracefully. The public entry point for this functionality is System.Security.Cryptography.X509Certificates.X509Certificate2.GetNameInfo, which would appear in a runtime profile during exploitation.
CryptoNative_GetX509NameInfosrc/native/libs/System.Security.Cryptography.Native/openssl.c
System.Security.Cryptography.X509Certificates.CertificateData.GetNameInfosrc/libraries/System.Security.Cryptography/src/System/Security/Cryptography/X509Certificates/CertificateData.ManagedDecode.cs
System.Security.Cryptography.X509Certificates.X509Certificate2.GetNameInfosrc/libraries/System.Security.Cryptography/src/System/Security/Cryptography/X509Certificates/X509Certificate2.cs